Trying to secure a Linux server and have little experience with SUID. After executing
find / -perm +4000
many programs were discovered. I have seen conflicting advice here and here on what should be enabled and not.
SUID Enabled
/bin/su
/usr/bin/passwd
/usr/bin/gpasswd
/sbin/unix_chkpwd
SUID Disabled
/usr/bin/crontab
/usr/bin/newgrp
/bin/ping
/bin/ping6
/bin/umount
/bin/mount
/usr/bin/chsh
/usr/bin/chfn
/usr/libexec/pt_chown
/usr/bin/sudo
/usr/bin/sudoedit
/usr/bin/chage
/usr/sbin/userhelper
/usr/sbin/usernetctl
/usr/sbin/suexec
UNSURE
/usr/libexec/openssh/ssh-keysign
/sbin/pam_timestamp_check
Server will host multiple sites with few Linux / SFTP users.
What should change? Also, how should I test?