Reviewing SUID Inventory: Filesystem Coverage, Program Context and Evidence
Review a SUID inventory with its filesystem coverage, mount context and program behavior recorded. Use the coverage record to distinguish a mode-bit observation from applicability, effective privileges and a demonstrated transition.