What's a command that I can use to find all suid binaries that are on my 
system?

Obviously 'find' will do it, but I'm not sure what set of flags to stick in 
there.

I tried `find / -perm +7000`, is that the right kind of thing?  The 7000 was a 
guess, I've never really worked out how the bits in that 4th digit are 
supposed to go.

On the same subject, how can I know whether a suid binary I find is supposed 
to be suid?  For example, why on *earth* is 'ping' suid?  Is it supposed to 
be?  How about 'gnuplot'?  How can that possibly need to be suid?

===
-rwsr-xr-x    1 root     root       792820 Oct  9 21:31 /usr/bin/gnuplot
===

Last question...  I think it was Mandrake that I was using when I noticed that 
the 'ls' command printed suid binaries in a nice obvious red colour, at least 
when you were root.  Does anyone know how I could turn that feature on?  It 
seems like a nice idea.

Thanks,

        Tom


--
[EMAIL PROTECTED] mailing list

Reply via email to