Story #8074
Story #8032: GMN v2
Eliminate unnecessary setuid/setgid programs
Start date:
2017-04-17
Due date:
% Done:
0%
Story Points:
Sprint:
Description
System installers often install numerous setuid/setgid programs that are unnecessary, and in some case introduce vulnerabilities, which enable privilege escalation.
setuid/setgid programs which are not needed for proper functioning of the system should be removed or disabled. Those that are needed should be evaluated for vulnerability and configuration issues.
Subtasks
History
#1 Updated by Dave Vieglais almost 7 years ago
- Sprint set to Infrastructure backlog