Protecting Against SUID- and SGID-Based Attacks

• Create a group for programs that must be SUID.

• Essential SUID scripts must not be writeable.

• If a program does not absolutely need SUID, change its permissions.

• Delete or uninstall SUID programs that are non-essential.

Notes: