Audit SUID binaries against a baseline

A SUID binary runs as its owner, usually root. List every SUID file on the host, compare with the build baseline, and explain why each extra one is dangerous.

Terminal mission
Beginner
3 objectives
0 of 3 solved

Briefing

This server was built from a hardened image whose SUID list is saved in ~/suid-baseline.txt. A quarterly review asks you to confirm nothing has been added since.

find / -perm -4000 -type f lists files with the set-user-ID bit. Errors from unreadable directories are noise, so send them to /dev/null with 2>/dev/null.

analyst@app-07

app-07 · Privilege audit

Type help for the command list and objectives for your tasks. Everything runs in this browser.

analyst@app-07:~$

Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.