>Date: Mon, 15 Jul 1996 23:55:11 -0500
>From: VaX#n8 <vax@linkdead.paranoia.com>

>Failing that, or maybe in addition, it would be VERY nice to have a list
>of all the setuid programs and why they must be setuid, so a sysadmin
>can easily identify the ones that don't need that functionality on his
>or her system and remove the suid bit.

/etc/security maintains a list of setuid binaries.  The list is kept
somewhere under /var, UTSL to find it.
-- 
Mike Long <mike.long@analog.com>     <URL:http://www.shore.net/~mikel>
VLSI Design Engineer         finger mikel@shore.net for PGP public key
Analog Devices, CPD Division          CCBF225E7D3F7ECB2C8F7ABB15D9BE7B
Norwood, MA 02062 USA       (eq (opinion 'ADI) (opinion 'mike)) -> nil