Before you begin

Make sure all filesystems are mounted before performing this procedure.

To get a list of all set-UID programs owned by a particular user, perform the following:

1. Enter
   
   find / -user user -perm -4000 -exec ls -ldb {} \; > file

   The file is the name of a temporary file to store the information.

2. Examine the contents of file from step 1, and look for suspicious programs. You can compare the file with a reference file if you have created one. Any differences should be investigated.