[5459] in RedHat Linux List
Re: RedHat4.0 security
daemon@ATHENA.MIT.EDU (Otto Hammersmith)
Thu Nov 21 17:20:14 1996
From: Otto Hammersmith <ohammers@cu-online.com>
To: redhat-list@redhat.com
Date: Thu, 21 Nov 1996 10:44:11 -0600 (CST)
In-Reply-To: <Pine.LNX.3.93.961121102920.20119D-100000@redhat.com> from "Erik Troan" at Nov 21, 96 10:32:58 am
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
Erik Troan wrote:
>
> A faster way of finding suid binaries on a Red Hat system is:
>
> rpm -qalv | grep 'root' | grep '^...s'
>
> This runs in about 1.5 seconds on our build machine (166 MHz Pentinue [which
> was fast when we bought it!]). If you want to see all of the suid
> root binaries Red Hat ships, cd to RedHat/RPMS on your CDROM and
> run:
>
> rpm -qlvp * | grep 'root' | grep '^...s'
>
> I actually do know why they are all set that way -- if you have
> questions about any of them, feel free to ask.
>
> Erik
I'd like to point out that it's still a good idea to use the find
command to, 1) find setuid binaries not installed with rpm, and 2) to
see if there are any binaryes that are setuid that ought not to be.
It'd be pretty silly to trust the RPM database on the machine, if
you're sworried that i's been broken into.
--
-Otto
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
