Before you begin
For each filesystem you wish to check, you need to know the
mount point, filesystem type, and device name. These can be obtained from the
file. Ensure the filesystems are mounted.
To obtain a list of all of the set-UID files on a filesystem,
perform the following:
Change your working directory to the mount point for the filesystem
Execute the following command:
ncheck -s device_name | cut -f2 | xargs ls -l >filename
The filename is the name of a temporary file.
Check filename for suspicious files. You can compare it
with a reference file if you have one available.
Remove filename when you are finished.
Example: checking set-UIDs by filesystem
Check set-UIDs by filesystem
© 2004 The SCO Group, Inc. All rights reserved.
UnixWare 7 Release 7.1.4 - 22 April 2004