Setuid
Revision 8 as of 2007-10-31 21:21:39
Clear message
This is a list of setuid applications that need investigation. See the [https://lists.ubuntu.com/archives/ubuntu-hardened/2007-October/000217.html mailinglist post] about this for more information.
Source Package Name |
setuid Files |
De-rooted |
Capabilities |
Changes Sent Upstream |
Comments |
iputils |
/bin/ping, /bin/ping6, /bin/arping, /usr/bin/traceroute6.iputils |
yes |
possible |
UNKNOWN |
|
fping |
/bin/fping |
needed |
|
no |
Checks: if ( geteuid() ) {... exit(3); Will patch and send upstream -JeffSchroeder |
mtr |
/usr/bin/mtr |
yes |
possible |
n/a |
n/a |
util-linux |
/bin/mount, /bin/umount |
needed |
no |
n/a |
Checks: if (getuid () != geteuid ()). Should check for CAP_SYS_ADMIN capability |