topic Re: umask difference between login and su - in Operating System - HP-UX

umask difference between login and su -

Mike Kuhar — Tue, 14 Oct 2003 14:29:43 GMT

When a user logs in as oracle, the umask setting is 7077. If the user is logged in as himself and su - oracle, the umask is 022. Any have any idea why?

Re: umask difference between login and su -

Steven E. Protter — Tue, 14 Oct 2003 14:42:20 GMT

Yes.

It is being set by the .profile file for user oracle, or in one of the configuration files that .profile reads.

SEP

Re: umask difference between login and su -

Jorge Fabregas — Tue, 14 Oct 2003 14:43:38 GMT

Hello Mike,

I don't understand completely what you're trying to say. Is it: If you're , for example, logged in as root and then do a "su - oracle" the umask is going to be different than when you log in as oracle? It should be the same.

Check the user .profile. Maybe there's a line in there specifying the umask.

Jorge

Re: umask difference between login and su -

Steven E. Protter — Tue, 14 Oct 2003 14:47:57 GMT

Apologies for my earlier response:

find /home -exec grep -li 'umask' {} \;

umask is getting set somewhere, you need to trace in and figure out where its being set. Also check /etc/profile

I bet there is a conflict between .profile or something in the chain and /etc/profile

su - is supposed to load the SAME environment as a straight login.

su without the dash does not load the environment or umask settings.

SEP

Re: umask difference between login and su -

Mike Kuhar — Tue, 14 Oct 2003 14:49:34 GMT

I was under the impression that .profile was read when you 'su -' into that user. According to the man page, "If the - option is specified, the new shell starts up as if the user had initiated a new login session." What am I missing?

Re: umask difference between login and su -

Mike Kuhar — Tue, 14 Oct 2003 15:06:26 GMT

I tried the command you supplied Steven, and it didn't bring to light anything that I didn't already know. This is a trusted system. Would a umask be set somewhere else other than the standard places?

Re: umask difference between login and su -

T G Manikandan — Tue, 14 Oct 2003 23:42:47 GMT

If you are using bourne /ksh check

/etc/profile --system wide file
.profile-placed in users home dir

Also check any script placed inside these files.

Re: umask difference between login and su -

Dietmar Konermann — Wed, 15 Oct 2003 02:18:52 GMT

If we are talking about 11.00 then you should install Patch PHKL_23226 (replaced by PHKL_29434).

PHKL_23226:
( SR: 8606175710 CR: JAGad44950 )
umask(1) may incorrectly set file permission bits.

Best regards...
Dietmar.

Re: umask difference between login and su -

Mark Grant — Wed, 15 Oct 2003 02:18:53 GMT

Another question. Do your users happen to log in using "X" i.e. do they get a graphical login but then run an *term in order to "su -". If this is the case, then none of the normal shell initialization files get run by default and you are would need to start looking at X configuration files instead. One more thing, if you set a umask and "su -" to an account that doesn't have one set, you keep your umask.

Re: umask difference between login and su -

Dietmar Konermann — Wed, 15 Oct 2003 02:23:53 GMT

BTW, why I believe this to be not a scripting but a kernel problem...

# umask 7077
sh: umask: The specified number is not valid for this command.

7077 is an illegal umask. You cannot set that from user land. :-)

Best regards...
Dietmar.

Re: umask difference between login and su -

Mike Kuhar — Wed, 15 Oct 2003 08:18:20 GMT

Thanks Dietmar. I'm sure that's the problem. I couldn't find, anywhere, where this umask was being set. As temporary fix, can I just set umask to 022 in Oracle's .profile?

Re: umask difference between login and su -

Dietmar Konermann — Wed, 15 Oct 2003 10:13:15 GMT

Of course you can. But take care to install that patch to get the root cause fixed.

Re: umask difference between login and su -

Mike Kuhar — Wed, 15 Oct 2003 10:48:42 GMT

Thanks Dietmar. Will do. This is just a temp fix until I get a window to do some major patching of the system. Thanks again.

Re: umask difference between login and su -

Bruno Ganino — Wed, 15 Oct 2003 11:07:13 GMT

This error could be verified when there is installed suidperl. Confused with umask 077.

Re: umask difference between login and su -

Sanjay_6 — Wed, 15 Oct 2003 11:54:14 GMT

Hi Mike,

Check and see if the umash is being set using .profile or some other script. If it is being set using .profile then it should be set to the required umash setting when you do a su - user.

Hope this helps.

Regds