Mastering Linux Security and Hardening

Hands-on lab – searching for SUID and SGID files

You can do this lab on either of your virtual machines. You'll save the output of the find command to a text file:

1. Search through the entire filesystem for all files that have either SUID or SGID set, saving the output to a text file:

        sudo find / -type f \( -perm -4000 -o -perm 2000 \) -ls >         suid_sgid_files.txt

2. Log into any other user account that you have on the system, and create a dummy shell script file. Then, set the SUID permission on that file, and log back out into your own user account:

        su - desired_user_account        touch some_shell_script.sh        chmod 4755 some_shell_script.sh        ls -l some_shell_script.sh        exit

3. Run the find command again, saving the output to a different text file: