From owner-freebsd-security  Wed Oct 30 15:32:27 1996
Return-Path: owner-security
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id PAA09468
          for security-outgoing; Wed, 30 Oct 1996 15:32:27 -0800 (PST)
Received: from s5.elec.uq.edu.au (clary@s5.elec.uq.edu.au [130.102.96.5])
          by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id PAA09461
          for <freebsd-security@freebsd.org>; Wed, 30 Oct 1996 15:32:21 -0800 (PST)
Received: (from clary@localhost) by s5.elec.uq.edu.au (8.7.6/8.7.3) id JAA21364 for freebsd-security@freebsd.org; Thu, 31 Oct 1996 09:32:18 +1000 (EST)
From: Clary Harridge <clary@elec.uq.edu.au>
Message-Id: <199610302332.JAA21364@s5.elec.uq.edu.au>
Subject: /etc/security
To: freebsd-security@freebsd.org
Date: Thu, 31 Oct 1996 09:32:18 +1000 (EST)
X-Mailer: ELM [version 2.4ME+ PL28 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

A suggestion for /etc/security

The current version falls over when checking for suid / sgid files
when the file names contain spaces. These file names are generated
by win95 when your FreeBSD host runs as a samba server.
Any such suid files just get dropped by the find but give errors.

You get lots of errors like

find: /u1/staff/matt/Mail/ GPutland: illegal path
find: /u1/staff/matt/Mail/ Email: illegal path

I would suggest 
REPLACING
================================================================
while test $# -ge 1; do
        mount=$1
        shift
        find -X $mount -xdev -type f \
                \( -perm -u+x -or -perm -g+x -or -perm -o+x \) \
                \( -perm -u+s -or -perm -g+s \) | sort
done | xargs -n 20 ls -lgTd > $TMP
================================================================
WITH
================================================================
	find $mount -xdev -type f \
		\( -perm -u+x -or -perm -g+x -or -perm -o+x \) \
		\( -perm -u+s -or -perm -g+s \) -a -exec ls -lgTd {} ";"
done > $TMP
================================================================

-- 
regards			Dept. of Electrical Engineering,
Clary Harridge		University of Queensland, QLD, Australia, 4072
			Phone: +61-7-3365-3636	Fax:   +61-7-3365-4999
			INTERNET: clary@elec.uq.edu.au