Last change
on this file since 2223 was
1917,
checked in by achernya, 13 years ago
|
Create check-setugid cronjob
This cronjob and associated whitelist will search the Scripts servers
daily for set[ug]id binaries, and complain if any unexpected ones are
found.
|
File size:
195 bytes
|
Line | |
---|
1 | MAILTO=scripts-root@mit.edu |
---|
2 | 23 5 * * * root find / -xdev -not -perm -o=x -prune -o -type f -perm /ug=s -print | grep -Fxvf /etc/scripts/allowed-setugid.list | sed 's/^/Extra set[ug]id binary: /' |
---|
Note: See
TracBrowser
for help on using the repository browser.