Prohibiting the Shell Scripts with the setuid or setgid Bit

Note: Scripts with special permissions may be maliciously used, posing great threats to the system. You are advised not to use scripts with the set user ID (SUID) and set group ID (SGID) bit unless necessary.

Implementation guide: Check whether the system SUID/SGID files are necessary. If the files are unnecessary, delete the files or the s bit.

# find / -perm -2000 -exec ls -l {} \; -exec md5sum {} \;
# find / -perm -4000 -exec ls -l {} \; -exec md5sum {} \;