| 
                Last change
                  on this file since 2093 was
                  1917,
                  checked in by achernya, 14 years ago
           | 
        
        
          | 
            Create check-setugid cronjob
This cronjob and associated whitelist will search the Scripts servers
daily for set[ug]id binaries, and complain if any unexpected ones are
found.
           | 
        
        | 
            File size:
            195 bytes
           | 
      
      
        
  | Line |   | 
|---|
| 1 | MAILTO=scripts-root@mit.edu | 
|---|
| 2 | 23 5 * * * root find / -xdev -not -perm -o=x -prune -o -type f -perm /ug=s -print | grep -Fxvf /etc/scripts/allowed-setugid.list | sed 's/^/Extra set[ug]id binary: /' | 
|---|
       
      
      Note: See 
TracBrowser
        for help on using the repository browser.