Security Review: Solaris 8 Setuid/Setgid Files
Information Systems and Technology
University of Waterloo

Setuid/Setgid files new in Solaris 8

There are a few Setuid/Setgid files we found in Solaris 8 that we didn't find in Solaris 7:

/usr/bin/pfexec
/usr/bin/sparcv9/ipcs
/usr/bin/sparcv9/ps
/usr/bin/sparcv9/uptime
/usr/lib/fbconfig/SUNWifb_config
/usr/openwin/bin/sparcv9/kcms_configure
/usr/platform/sun4u/sbin/eeprom
/usr/platform/sun4u/sbin/prtdiag
/usr/sbin/afbconfig
/usr/sbin/aspppls
/usr/sbin/ffbconfig
/usr/sbin/igsconfig
/usr/sbin/m64config
/usr/sbin/pgxconfig
/usr/sbin/sparcv9/prtconf
/usr/sbin/sparcv9/swap
/usr/sbin/sparcv9/sysdef
/usr/sbin/sparcv9/whodo
/usr/ucb/sparcv9/ps
/usr/xpg4/bin/sparcv7/ipcs
/usr/xpg4/bin/sparcv9/ipcs

Most of the sparcv9 programs under /usr/bin, /usr/sbin and /usr/ucb match with the sparcv7 versions we found in Solaris 7 and most of the sun4u platform specific programs match Solaris 7 versions. Again they're mostly just an architectural difference between the Sparc (32bit) and Ultra-Sparc (64bit) kernels. There are a couple of surprises though -- kcms_configure under the Open-Windows sparcv9 and prtdiag under the sun4u platform are new!

The two versions of ipcs under /usr/xpg4 are yet another version of the ipcs program we found on Solaris 7 and the same recommendations apply. Apparently XPG4 is one of the POSIX standards that Solaris implements (see the man page).

Nevertheless there a few new tools we need to evaluate.