SUID / SGID

[Michael Hilscher <misc-openbsd@michael-hilscher.de>]

Hallo,

i'm sure that this question comes up often. But i was not abled to find
the searched information on the bsd website or even the misc archiv.
Maybe i searched wrong and somebody could give me further advise?

I'm wondering about the SGID Bit (group = root) on Directory:
/var/audit. On my minimalistic Webserver(-testinstallation) this
Directory is empty. So I realy cant imagine why SGID is set on it ,-)

Also I'm not sure about the SUID-Bits on following Files:
/usr/libexec/auth/login_*
/usr/libexec/lockspool
/usr/libexec/ssh-keysign

which one of them are really needed? On my System are no User Accounts
needed (just one for usinig su / sudo). Can I remove those SUID-Bits 
without getting trouble - i think ssh-keysign could used in an secure
way direct as root, and it may be better to use it direct as root then
got an SUID-Bit on it?


greetinXs,         
Michael Hilscher  

-- 
Would Mozart have been more productive if he had scribes to help him, a
secretary and a CEO to lead his way? -- Linus Torvalds