Check if setuid bit is set

1 files changed, 3 insertions, 0 deletions

diff --git a/lynis b/lynis
index e5faf06f..d486520a 100755
--- a/lynis
+++ b/lynis
@@ -67,6 +67,9 @@
 #
 #################################################################################
 #
+    # Check setuid bit
+    if [ -u "$0" ]; then echo "The called binary has the set-user-id bit - As this is unusual, execution will be stopped."; exit 1; fi
+
     # Work directory
     WORKDIR=$(pwd)