Softpanorama
(slightly skeptical) Open Source Software Educational Society

May the source be with you, but remember the KISS principle ;-)

Google   


SUID/SGID Checkers

Thor Findsuid Suidcontrol

Thor

[DISAPPEARED FROM THE WEB] thor.pl keeps tabs on suid and sgid files on your file system. It also keeps track of the checksums of your binaries and the root accounts on the system as well as a few other things. It's a handy script that helps you find possible security risks, or breakins.

Download: http://www.linuxscripts.com/arc/thor1.0.tar.gz
Homepage: http://www.linuxscripts.com/

Findsuid

findsuid, pcheck Directory of -pub-unix-sec8 This little shell script can be adapted to run from cron in oprder to report setuid and setgid changes (very handy and simple script because main enemy of sysadmins is not hackers, but he himself and his colleagues ;-). The directory contains a lot of other useful for sysadmin scripts ! Here is full INDEX

Suidcontrol

23-Aug-98 Suidcontrol-0.1 utility has been released. The suidcontrol is an experimental utility for managing suid/sgid policy under FreeBSD. It actually generated the list and script to check it. In this particular case the idea is not that impressive. http://www.watson.org/fbsd-hardening/suidcontrol.html


Copyright © 1996-2008 by Dr. Nikolai Bezroukov. www.softpanorama.org was created as a service to the UN Sustainable Development Networking Programme (SDNP) in the author free time. Submit comments This document is an industrial compilation designed and created exclusively for educational use and is placed under the copyright of the Open Content License(OPL). Original materials copyright belong to respective owners. Quotes are made for educational purposes only in compliance with the fair use doctrine.

Standard disclaimer: The statements, views and opinions presented on this web page are those of the author and are not endorsed by, nor do they necessarily reflect, the opinions of the author present and former employers, SDNP or any other organization the author may be associated with. We do not warrant the correctness of the information provided or its fitness for any purpose.

Created: May 16, 1997; Last modified: October 05, 2004