Unix Security Analyzer Help
SUID set and owned by root
Some files require root permissions to execute properly. The SUID setting forces files to run with the same permissions as their owner, which ensures that programs like su will always have the correct permissions.
In general, SUID should be avoided due to a potential security risk that would occur if an unauthorized user modifies such a file to delete, access, or change sensitive files. As such, no files with the SUID set and owned by root should have global write permissions.
It is normal to see system files, such as su, at, cron, chkey, etc. in this list. Raise an exception only when you spot non-system files or files with loose write permissions.
Further discussion on this topic is available at the following websites:Unix.com.auRutgers.edu
Please click here to ask Chris for guidance on this test or the results that you received.
2-10
|
|
