From owner-freebsd-security  Mon Jul 15 08:01:55 1996
Return-Path: owner-security
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id IAA15612
          for security-outgoing; Mon, 15 Jul 1996 08:01:55 -0700 (PDT)
Received: from tombstone.sunrem.com (tombstone.sunrem.com [206.81.134.54])
          by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id IAA15606;
          Mon, 15 Jul 1996 08:01:53 -0700 (PDT)
Received: (from brandon@localhost) by tombstone.sunrem.com (8.6.12/8.6.12) id JAA25329; Mon, 15 Jul 1996 09:01:15 -0600
Date: Mon, 15 Jul 1996 09:01:15 -0600 (MDT)
From: Brandon Gillespie <brandon@tombstone.sunrem.com>
To: Gary Palmer <gpalmer@FreeBSD.ORG>
cc: freebsd-security@FreeBSD.ORG
Subject: Minimal SUID/SGID programs list? (was: Re: New EXPLOIT located!) 
In-Reply-To: <2172.837420659@orion.webspan.net>
Message-ID: <Pine.BSF.3.91.960715085921.25293A-100000@tombstone.sunrem.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-security@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

On Mon, 15 Jul 1996, Gary Palmer wrote:
> 
> find / -fstype ufs \( -perm -u+s -or -perm -g+s \) -print
> 
> will get you a list of all locally installed SUID / SGID binaries.

Does anybody have a list of the minimal SUID/SGID programs needed?  I 
could easilly start removing bits everywhere, but the server I would like 
to do it on needs to stay UP without problems..  I can go back later and 
set the programs I need personally back to suid, but what does the OS need?

-Brandon Gillespie