Mastering Linux Security and Hardening - Second Edition

Hands-on lab – searching for SUID and SGID files

You can perform this lab on either of your virtual machines. You'll save the output of the find command to a text file. Let's get started:

1. Search through the entire filesystem for all the files that have either SUID or SGID set before saving the output to a text file:

 sudo find / -type f -perm /6000 -ls > suid_sgid_files.txt

2. Log into any other user account that you have on the system and create a dummy shell script file. Then, set the SUID permission on that file and log back out and into your own user account:

su - desired_user_accounttouch some_shell_script.shchmod 4755 some_shell_script.shls -l some_shell_script.shexit

3. Run the find command again, saving the output to a different text ...