Before you begin
Make sure
all filesystems are mounted before performing this procedure.
To get a list of all set-UID programs owned by a particular user,
perform the following:
-
Enter
find / -user user -perm -4000 -exec ls -ldb {} \; > file
The file is the name of a temporary file to store the
information.
-
Examine the contents of file from step 1, and look for
suspicious programs. You can compare the file with a reference
file if you have created one. Any differences should be
investigated.
Next topic:
Example: checking set-UIDs
Previous topic:
Check set-UIDs
© 2004 The SCO Group, Inc. All rights reserved.
UnixWare 7 Release 7.1.4 - 22 April 2004