find, awk ( Unix )

/*to know the names of all SUID and SGID files.*/

# find / \( -prem -004000 -o -perm -002000 \) -type f -print

(p79, Simson Garfinkel & Gene Spafford, Practical Unix Secutity, O'Reilly & Associates, Inc.)

/*scan disks for unauthorized device files.*/

# find / \( -type c -o -type b \) -exec ls -l {} \;

(p83,)

/*scan for accounts on the computer without passwords*/

# awk -F: 'length($2)<1 {print $1}' < /etc/passwd (/etc/shadow, /etc/secure/passwd)

(p90,)

awk