From owner-freebsd-security Thu Jul 8 22:52:24 1999 Delivered-To: freebsd-security@freebsd.org Received: from host07.rwsystems.net (kasie.rwsystems.net [209.197.192.103]) by hub.freebsd.org (Postfix) with ESMTP id B042A14D0C for ; Thu, 8 Jul 1999 22:52:21 -0700 (PDT) (envelope-from jwyatt@RWSystems.net) Received: from kasie.rwsystems.net([209.197.192.103]) (1681 bytes) by host07.rwsystems.net via sendmail with P:esmtp/R:bind_hosts/T:inet_zone_bind_smtp (sender: ) id for ; Fri, 9 Jul 1999 00:32:39 -0500 (CDT) (Smail-3.2.0.104 1998-Nov-20 #1 built 1998-Dec-24) Date: Fri, 9 Jul 1999 00:32:23 -0500 (CDT) From: James Wyatt To: Gustavo V G C Rios Cc: security@freebsd.org, bos-owner-br@sekure.org Subject: Re: suid/guid In-Reply-To: <3784D440.1075EFB3@tdnet.com.br> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 8 Jul 1999, Gustavo V G C Rios wrote: > Which of the following file should i turn off suid/guid bit flag? > I just wanna keep the necessary file tunr on suid/guid! > > My system is freebsd-3.2Stable > > Here goes them: > > /proc/2965/file I can't find this one on my system; is it still there on yours? 8{) > /bin/df > /bin/ps > /bin/rcp [ ... removed ... use 'find' for s/g-id executables ... ] Some of them are very important for all users (sendmail, passwd, ...) , many are useful to most users (chfn, man, ...), others you can 'chgrp' the s/g-id bits away if you run them only as root (at, shutdown, ping, ...). Some are infrequently used (ipcs, ccdconfig) or only on NIS-managed netdowns (yp*). If you want to learn more, try trolling man pages before trolling mailing lists: 8{P find / -type f \( -perm -4000 -o -perm -2000 \) -print | \ awk '{print"man `basename "$1"`"}' | more I learned almost from doing it as I did *reading* the c library function list. (echoes of "Wow, I didn't know there was a command/function to do *that*!"...) Hope this helps - Jy@ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message