[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: security



On Sun, Sep 03, 2000 at 01:46:51AM -0500, Mike McNally wrote:
> It concerns me when my machine grinds when I don't know why it's
> grinding.  I run top and it says find is running.  Why?  I do a grep -r
> find /etc/cr* and the only things that come up run per crontab.  Crontab
> shows that all cron routines run around sunup... it's now 1:42 and my
> linux box with a 24hr old install of debian was grinding at 1:10. 

is your clock correct?  or perhaps you have anacron installed which
runs cron jobs approximatly whenever it feels like it.

the find process is normal, i think its the locate database being
rebuilt.  all my debian boxes do the same thing (except at 6:25, i
don't use anacron)

> Running ls -l /bin | grep rws I get:
> -rws... root root for login mount ping ping6 su umount
> 
> Are all of these programs normally setoid?

yes these are normal, ping and ping6 (the ipv6 varient i guess) need
to be suid root in order to open a raw socket.  login needs to be suid
root if you want to be able to do things like exec login to login as a
new user without logging out first (rather pointless IMO and it only
works on console ttys) mount and umount only need to be suid root if
you have `user' /etc/fstab entries, such as /cdrom or /floppy, this
way ordinary users can mount and umount the CDROM or floppy.  su has
to be suid root in order to work at all (changing uid's requires root privilege).  

-- 
Ethan Benson
http://www.alaska.net/~erbenson/

Attachment: pgpzDDOegLVcZ.pgp
Description: PGP signature


Reply to: