On Sun, Jun 29, 2003 at 11:28:47AM -0400, bda wrote: > On Sun, Jun 29, 2003 at 09:47:13PM +0800, Jason Lim wrote: > > Is there any tool that could search the system for root suid scripts (so > > the hacker can login again and gain root easily)? > > find / -uid 0 -perm 0400 I guess this should have been 04000 Marcin -- Marcin Owsiany <porridge@debian.org> http://marcin.owsiany.pl/ GnuPG: 1024D/60F41216 FE67 DA2D 0ACA FC5E 3F75 D6F6 3A0D 8AA0 60F4 1216