Should these files be setuid?

[gaf at blu.org (Jerry Feldman)]

Mine are in /sbin, and only unix_chkpwd. I am running SuSE 6.4.
-rwxr-sr-x   1 root     shadow      26835 Mar 11  2000 /sbin/unix_chkpwd 
David Kramer wrote:
> A system change monitoring tool I am using flagged these files as having
> been changed to setuid.  Now this tool often reports false positives, so
> I am not assured of this, but I could not find any docs on these files,
> either.
> 
> -r-sr-xr-x   1 root     root        15752 Jul 21  2000 pwdb_chkpwd
> -r-sr-xr-x   1 root     root        16376 Jul 21  2000 unix_chkpwd
> 
> I checked another (older) machine, which had pwdb_chkpwd with the same
> permissions, but unix_chkpwd
>  was not there.   There were no man pages, but a find/grep on /usr/doc
> showed that pwdb_chkpwd was part of PAM.  unix_chkpwd was not found
> anywhere.
> 
> Any thoughts?
> -
> Subcription/unsubscription/info requests: send e-mail with
> "subscribe", "unsubscribe", or "info" on the first line of the
> message body to discuss-request at blu.org (Subject line is ignored).
> 

-- 
Jerry Feldman <gaf at blu.org>
Boston Linux and Unix user group
http://www.blu.org


-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).