Removing SetUID/SetGID Bits
2007-12-24 20:17:00
remove a bunch of SetUID bits, or shut down the entire X system altogether
(e.g. shut down dtlogin on the console and compile SSH with --without-x
combined with strict ip_filter settings preventing straight X).
Anyhow, could someone tell me what the consequences would be by removing the
setuid or setgid bits from the following programs? Will I be able to
continue using X at all, or will I need to shut it down to adequately secure
my box? I'm pretty confident about most of the binaries on the system, but
am unsure about the following...
/usr/dt/bin/dtsession
/usr/dt/bin/dtaction
/usr/openwin/bin/kcms_configure
/usr/openwin/bin/kcms_calibrate
Thanks for your help.
PS: Anyone had any firsthand experience with Hardened OS software?
Comments
Got something to say?
You must be logged in to post a comment.
