There is a way to use Linux commands to display all programs with the setuid bit on. I run this periodically to look for programs that are setuid and owned by root, and I jot down the number of them. If this number gets larger it may indicate a security breech. Why

Question

Daisy Petersen

Computers & Technology

3 July, 15:40

There is a way to use Linux commands to display all programs with the setuid bit on. I run this periodically to look for programs that are setuid and owned by root, and I jot down the number of them. If this number gets larger it may indicate a security breech. Why

+4

Answers (1)

Know the Answer?

Jayvon Dudley · Answer 1

The SUID bit is a type of permission files that is previously granted to a file. In Linux when you run a program, these special permissions are inherited to the user who is working. The SUID grants permissions to a user temporarily.

Explanation:

If the time lengthens, it is possibly due to a security breach. A change of the password is recommended, through the passwd command. Through this command, some files cannot be opened or seen by the user, only by the user who has root permissions. By configuring the passwd through the SUID we can grant root user permissions to any type of user, so that in such case update, use the shadow and files.