ESX default setuid and setgid applications

Default setuid applications:

• required: pam_timestamp_check, passwd, pwdb_chkpwd, ssh_keysign, su, unix_chkpwd, vmkload_app, vmware-authd, vmware-vmx
• optional: crontab, ping, sudo

Default setgid applications:

• wall optional
• lockfile required for Dell OM, otherwise optional.

To disable setuid/setgid, use chmod a-s/g <path_to_executable_file>