I use SuSE 8.2 and I followed the advice from a book that I was reading, that said to check for setuid and setgid files. Which I did, but the results mean nothing to me, so I was just wondering if anybody could give me some idea as to which files I should change and which one's need to be setuid or setgid and why...

This is the list of files on my system that have the setuid or setgid bit set...

setuid....

/bin/su
/bin/ping
/bin/eject
/bin/mount
/bin/ping6
/bin/umount
/opt/kde3/bin/fileshareset
/opt/kde3/bin/kcheckpass
/usr/X11R6/bin/XFree86
/usr/lib/pt_chown
/usr/bin/sudo
/usr/bin/mandb
/usr/bin/rcp
/usr/bin/rlogin
/usr/bin/rsh
/usr/bin/chage
/usr/bin/expiry
/usr/bin/gpasswd
/usr/bin/newgrp
/usr/bin/passwd
/usr/bin/chfn
/usr/bin/chsh
/usr/bin/at
/usr/bin/crontab
/usr/sbin/isdnctrl


setgid....

/opt/kde3/bin/kdesud
/usr/sbin/utempter
/usr/sbin/postdrop
/usr/sbin/postqueue
/sbin/unix_chkpwd
/sbin/unix2_chkpwd

Any help on this would be greatly appreciated...........Thanks.................

Look all sane to me ... if you want to be sure you
should be reading the respective packages readme
file to find out whether the author recommends it
to be suid/gid'ed ...


Cheers,
Tink


P.S.: Moved to security ;)

>> if you want to be sure you
>> should be reading the respective packages readme
>> file to find out whether the author recommends it
>> to be suid/gid'ed ...

Now why didn't I think of that ??? Anyway, thanks for the info, sorry for posting in it in the wrong forum, it seemed to apply to both newbie and security so I just put it in the newbie section instead...

Thanks.........jd32