Remove the unsafe SUID bit
An audit found that /usr/bin/find is SUID-root — a search tool that should never run as root.
Confirm the bit, then strip it so find runs as a normal program again.
How it works: the terminal below is a real Linux machine running in your browser. Click it and
type. Tasks tick themselves off as you complete them; questions are answered in the box under each task.
Press Reset any time for a fresh machine. Your password on this machine (for
sudo) is student.
Hints
`ls -l /usr/bin/find` shows the `s` bit.
`sudo chmod u-s /usr/bin/find` removes it.
Solution explanation
You confirmed the s in the owner's permissions and removed it with sudo chmod u-s /usr/bin/find. That single bit was the difference between a harmless search tool and a one-command route to root. Reviewing the SUID list and stripping the bit from anything that does not need it is one of the highest-value things an admin can do on a Linux host.
Show solution
cd /home/student
ls -l /usr/bin/find
sudo chmod u-s /usr/bin/find
ls -l /usr/bin/find