That explains a lot. Now I am wondering if I should just uninstall secchk on this box, since its output is more of an annoyance than a security tool for me. I am planning a second box for use as server only, so secchk will probably be more useful there, where little will change on a daily basis. It would be great to have a similar script with an incremental update of the database. Rob. Markus Gaugusch wrote:
"The following programs have got a new suid and/or sgid bit:" basically, every suid program has a new bit.. here's a snippet.. (where's the snippet?) that's true, because the secchk scripts build up something like a database with the rights. on the first run, the database is built up from ground, and therefore every file gets a (new) entry.
regards Markus Gaugusch
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com