CIRT Gateway

Giving SUID to some things like find, vim, less, man etc, is basically handling out a root on a silver platter. Always check for misconfigured SUID given to some programs which are not necessary to be given.

When a known binary has the SUID bit set, think about what built-in features that binary has — not just how to replace it. Some binaries can execute other commands as part of their normal operation.