Issue the cm getsetuid command to determine the status of setuid programs on specific filesets:
$ cm getsetuid [-path {filename | directory_name}...]
The -path option specifies a file or directory from each fileset whose setuid status is to be displayed. Omit this option to display the status for the fileset that contains the current working directory.
The output from this command includes a line for each specified fileset, stating either
· no setuid allowed, indicating that setuid (and setgid) programs from the fileset are disabled
· setuid allowed, indicating that setuid (and setgid) programs from the fileset are enabled
· cm: the fileset on which 'pathname' resides does not exist, indicating that the pathname specified with the -path option is invalid