Before you begin
For each filesystem you wish to check, you need to know the
mount point, filesystem type, and device name. These can be obtained from the
/etc/vfstab
file. Ensure the filesystems are mounted.
To obtain a list of all of the set-UID files on a filesystem,
perform the following:
-
Change your working directory to the mount point for the filesystem
using the
cd
command. Enter
cd pathname
-
Execute the following command:
ncheck -s device_name | cut -f2 | xargs ls -l >filename
The filename is the name of a temporary file.
-
Check filename for suspicious files. You can compare it
with a reference file if you have one available.
-
Remove filename when you are finished.
Next topic:
Example: checking set-UIDs by filesystem
Previous topic:
Check set-UIDs by filesystem
© 2004 The SCO Group, Inc. All rights reserved.
UnixWare 7 Release 7.1.4 - 22 April 2004