LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-14-2004, 07:53 PM   #1
jd32
LQ Newbie
 
Registered: Oct 2004
Distribution: SuSE 8.2
Posts: 5

Rep: Reputation: 0
setuid + setgid files...


I use SuSE 8.2 and I followed the advice from a book that I was reading, that said to check for setuid and setgid files. Which I did, but the results mean nothing to me, so I was just wondering if anybody could give me some idea as to which files I should change and which one's need to be setuid or setgid and why...

This is the list of files on my system that have the setuid or setgid bit set...

setuid....

/bin/su
/bin/ping
/bin/eject
/bin/mount
/bin/ping6
/bin/umount
/opt/kde3/bin/fileshareset
/opt/kde3/bin/kcheckpass
/usr/X11R6/bin/XFree86
/usr/lib/pt_chown
/usr/bin/sudo
/usr/bin/mandb
/usr/bin/rcp
/usr/bin/rlogin
/usr/bin/rsh
/usr/bin/chage
/usr/bin/expiry
/usr/bin/gpasswd
/usr/bin/newgrp
/usr/bin/passwd
/usr/bin/chfn
/usr/bin/chsh
/usr/bin/at
/usr/bin/crontab
/usr/sbin/isdnctrl


setgid....

/opt/kde3/bin/kdesud
/usr/sbin/utempter
/usr/sbin/postdrop
/usr/sbin/postqueue
/sbin/unix_chkpwd
/sbin/unix2_chkpwd

Any help on this would be greatly appreciated...........Thanks.................
 
Old 10-15-2004, 05:24 PM   #2
Tinkster
Moderator
 
Registered: Apr 2002
Location: earth
Distribution: slackware by choice, others too :} ... android.
Posts: 23,067
Blog Entries: 11

Rep: Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928
Look all sane to me ... if you want to be sure you
should be reading the respective packages readme
file to find out whether the author recommends it
to be suid/gid'ed ...


Cheers,
Tink


P.S.: Moved to security ;)
 
Old 10-16-2004, 11:10 AM   #3
jd32
LQ Newbie
 
Registered: Oct 2004
Distribution: SuSE 8.2
Posts: 5

Original Poster
Rep: Reputation: 0
>> if you want to be sure you
>> should be reading the respective packages readme
>> file to find out whether the author recommends it
>> to be suid/gid'ed ...

Now why didn't I think of that ??? Anyway, thanks for the info, sorry for posting in it in the wrong forum, it seemed to apply to both newbie and security so I just put it in the newbie section instead...

Thanks.........jd32
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
setgid: operation not permitted Johnburrell Linux From Scratch 10 03-07-2010 05:03 AM
authority: setgid is invalid to SGID . superstition Linux - General 4 08-18-2005 06:44 PM
Bash script to email setuid root files deoren LinuxQuestions.org Member Success Stories 1 01-30-2005 09:56 AM
newgrp setgid on website files komox Linux - Security 1 09-04-2004 07:55 AM
Permissions (Setuid, Setgid, etc) Please help MelLinux Linux - General 1 10-18-2002 11:33 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:40 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration