DE

↑ ↓ select, Enter open, Esc close

Find files with the SUID or SGID bit

harmless rootPermissions and ownershipalle
root@server
find / -xdev \( -perm -4000 -o -perm -2000 \) -type f -exec ls -l {} + 2>/dev/null

Searches the root filesystem for files with the SUID bit set (runs as the owner, usually root) or the SGID bit (runs with the file’s group). System programs such as passwd, sudo or mount under /usr/bin are normal. Matches in web directories, /tmp or a user’s home directory are a red flag.

Note: -xdev stays on the root filesystem. If /var or /home live on separate partitions, pass them separately as starting paths.

Also searched as

  • find suid files linux
  • check setuid binaries rootkit
  • find programs running as root
  • security audit file permissions

Related one-liners

All in Permissions and ownership

Find world-writable files and directories

$find /var/www/vhosts -xdev -perm -0002 ! -type l -ls 2>/dev/null
harmlessPermissions and ownership

Find files with the wrong owner in a webspace

#find /var/www/vhosts/example.com/httpdocs ! -user webuser -ls
harmlessPermissions and ownership

Find files without a valid owner

#find /var/www -xdev \( -nouser -o -nogroup \) -ls 2>/dev/null
harmlessPermissions and ownership

Remove write permission for others recursively

$chmod -R o-w /var/www/vhosts/example.com/httpdocs
cautionPermissions and ownership

Reset file ownership in a Plesk webspace to the subscription user

#find /var/www/vhosts/example.com/httpdocs -mindepth 1 -exec chown -h webuser:psacln {} +
cautionPermissions and ownership

Secure the permissions of wp-config.php

$chmod 600 /var/www/vhosts/example.com/httpdocs/wp-config.php
cautionPermissions and ownership

Read first, then run.

The commands on myline.de act directly on servers, files and databases. A wrong path or placeholder can delete data irreversibly or make a server unreachable.

  • All commands are provided without warranty and are not tested on every system.
  • Understand what a command does before running it, and check every placeholder.
  • Make a backup first and, if possible, try it on a test system.
  • You run commands at your own risk. Liability for damages is excluded to the extent permitted by law.