From owner-freebsd-questions  Sat Aug 25  9:14:12 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from gahch.it.ca (gahch.it.ca [216.126.86.4])
	by hub.freebsd.org (Postfix) with ESMTP id 7C22C37B406
	for <freebsd-questions@freebsd.org>; Sat, 25 Aug 2001 09:14:07 -0700 (PDT)
	(envelope-from paul@gahch.it.ca)
Received: (from paul@localhost)
	by gahch.it.ca (8.11.5/8.11.1) id f7PGCd576020;
	Sat, 25 Aug 2001 12:12:39 -0400 (EDT)
	(envelope-from paul)
Date: Sat, 25 Aug 2001 12:12:39 -0400
From: Paul Chvostek <paul@it.ca>
To: "Jatupon P." <badusenix@yahoo.com>
Cc: freebsd-questions@freebsd.org
Subject: Re: Find SU program
Message-ID: <20010825121239.D74195@gahch.it.ca>
References: <001301c12ed3$346e3720$252aa8c0@myoffice.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <001301c12ed3$346e3720$252aa8c0@myoffice.com>; from badusenix@yahoo.com on Mon, Aug 27, 2001 at 03:35:13PM +0700
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


The file /etc/security does this with:

        find $mount -xdev -type f \
                \( -perm -u+x -or -perm -g+x -or -perm -o+x \) \
                \( -perm -u+s -or -perm -g+s \) -print0

Results are stored in /var/log/setuid.today, which can be diffed with
/var/log/setuid.yesterday for interesting information.


On Mon, Aug 27, 2001 at 03:35:13PM +0700, Jatupon P. wrote:
> 
> Dear All,
> 
> I want to check all possible SU program in my FreeBSD box what command
> should i use?
> 
> Regards
> Jatupon P.
> 
> 
> _________________________________________________________
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

-- 
  Paul Chvostek                                             <paul@it.ca>
  Operations / Development / Abuse / Whatever       vox: +1 416 598-0000
  IT Canada                                            http://www.it.ca/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message