Date: Fri, 9 Jul 1999 00:32:23 -0500 (CDT) From: James Wyatt <jwyatt@RWSystems.net> To: Gustavo V G C Rios <kernel@tdnet.com.br> Cc: security@freebsd.org, bos-owner-br@sekure.org Subject: Re: suid/guid Message-ID: <Pine.BSF.4.05.9907090003420.10997-100000@kasie.rwsystems.net> In-Reply-To: <3784D440.1075EFB3@tdnet.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 8 Jul 1999, Gustavo V G C Rios wrote:
> Which of the following file should i turn off suid/guid bit flag?
> I just wanna keep the necessary file tunr on suid/guid!
>
> My system is freebsd-3.2Stable
>
> Here goes them:
>
> /proc/2965/file
I can't find this one on my system; is it still there on yours? 8{)
> /bin/df
> /bin/ps
> /bin/rcp
[ ... removed ... use 'find' for s/g-id executables ... ]
Some of them are very important for all users (sendmail, passwd, ...) ,
many are useful to most users (chfn, man, ...), others you can 'chgrp' the
s/g-id bits away if you run them only as root (at, shutdown, ping, ...).
Some are infrequently used (ipcs, ccdconfig) or only on NIS-managed
netdowns (yp*). If you want to learn more, try trolling man pages before
trolling mailing lists: 8{P
find / -type f \( -perm -4000 -o -perm -2000 \) -print | \
awk '{print"man `basename "$1"`"}' | more
I learned almost from doing it as I did *reading* the c library function
list. (echoes of "Wow, I didn't know there was a command/function to do
*that*!"...) Hope this helps - Jy@
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9907090003420.10997-100000>