1. Goal
Find overly permissive files, unexpected SUID binaries, and paths with inconsistent ownership.
2. Files and components involved
find
stat
namei
/etc
/srv
/home
3. Operational flow
find /etc -type f -perm -002 -ls
find / -xdev -type f -perm -4000 -ls
namei -l path
4. Operational verification
stat filecritico
find /home -maxdepth 2 -type d -perm -0002 -ls
getfacl path
5. Practical notes
Apply these changes during a maintenance window and keep a backup of the original files for a quick rollback.
Tightening a policy without an alternative access path is the fastest way to lock out legitimate users as well.
Quick checklist
[ ] Backup or copy of the existing configuration completed
[ ] Files and commands updated as expected
[ ] Local test completed successfully
[ ] Logs or final output verified
[ ] Rollback procedure documented