The officially official Devuan Forum!

bimon

Member

Registered: 2019-09-09

Posts: 172  

Please let me know why there are so many suid programs and even dirs?

Though most likely it is how Debian distro works. Is there any way to reduce this amount of suids without chmod?

/var/local
/var/mail
/opt/brave.com/brave/brave-sandbox
/usr/bin/ssh-agent
/usr/bin/bsd-write
/usr/bin/dotlockfile
/usr/bin/newgrp
/usr/bin/chage
/usr/bin/expiry
/usr/bin/crontab
/usr/bin/gpasswd
/usr/bin/dotlock.mailutils
/usr/bin/pkexec
/usr/bin/bwrap
/usr/bin/chfn
/usr/bin/passwd
/usr/bin/sudo
/usr/bin/wall
/usr/bin/chsh
/usr/lib/mc/cons.saver
/usr/lib/policykit-1/polkit-agent-helper-1
/usr/lib/eject/dmcrypt-get-device
/usr/lib/xorg/Xorg.wrap
/usr/lib/openssh/ssh-keysign
/usr/lib/x86_64-linux-gnu/utempter/utempter
/usr/lib/pidgin-blinklight/blinklight-fixperm
/usr/lib/dbus-1.0/dbus-daemon-launch-helper
/usr/local/lib/python2.7
/usr/local/lib/python2.7/dist-packages
/usr/local/lib/python2.7/site-packages
/usr/local/lib/python3.7
/usr/local/lib/python3.7/dist-packages
/usr/local/share/sgml
/usr/local/share/sgml/declaration
/usr/local/share/sgml/misc
/usr/local/share/sgml/entities
/usr/local/share/sgml/dtd
/usr/local/share/sgml/stylesheet
/usr/local/share/fonts
/usr/local/share/texmf
/bin/ping6
/bin/su
/bin/mount
/bin/umount
/bin/ping
/bin/fusermount
/bin/ntfs-3g
/sbin/unix_chkpwd

chris2be8

Member

Registered: 2018-08-11

Posts: 307  

Re: Please let me know why there are so many suid programs and even dirs?

Directories like /var/local/ and /var/mail/ are OK, the "s" just means that newly created files and subdirectories in them will have the same group as they do.

Programs like sudo and passwd do need to run as root. So they are the ones you need to worry about.

Chris