topic SUIDed scripts in Operating System - HP-UX

SUIDed scripts

Mike_21 — Mon, 03 Dec 2001 20:55:56 GMT

Is there any way to search for all scripts on a machine that are SUIDed scripts?

Thanks

Re: SUIDed scripts

Sridhar Bhaskarla — Mon, 03 Dec 2001 21:00:49 GMT

You can use -perm switch with find command.

find / -perm -4000

will printout all the executables (irrespective of regular permissions) with suid on.

If you want to find out the files with exact permissions, you need to skip -.

For ex., if you want to find files that have 4550 permissions, you would be executing

find / -perm 4550

- is significant.

-Sri

Re: SUIDed scripts

harry d brown jr — Mon, 03 Dec 2001 21:02:31 GMT

Along with Sridhar's examples, you might also want to take a look at this document:

http://people.hp.se/stevesk/bastion.html

live free or die
harry

Re: SUIDed scripts

Anthony deRito — Mon, 03 Dec 2001 21:03:47 GMT

# cd [dir_to_search]
# find . -user root -perm -4000 -print

Re: SUIDed scripts

James R. Ferguson — Mon, 03 Dec 2001 21:08:45 GMT

Hi Mike:

# find / -type f -perm -4000

Regards!

...JRF...

Re: SUIDed scripts

G. Vrijhoeven — Mon, 03 Dec 2001 21:09:16 GMT

Hi,

for i in `ls -Rl`
do
TEST=`echo $i | awk '{ print $1}'`
grep [sS] $TEST
if [ "$?" -eq 0 ]
then
echo $i >sbit.out
fi
done

Hope this wil help,

Gideon