topic Re: System Administration in Operating System - HP-UX

System Administration

Wallace C. Chappell — Thu, 09 Jun 2005 12:03:07 GMT

Any recommendations to on how to increase protection from the rm -rf command, other than creating an alias for rm?

Thanks

Re: System Administration

steven Burgess_2 — Thu, 09 Jun 2005 12:08:00 GMT

Hi

1. Sounds to me like an education issue
2. Be careful who you give root access to ?

Steve

Re: System Administration

A. Clay Stephenson — Thu, 09 Jun 2005 12:08:06 GMT

Yes, discipline and user training. UNIX is designed to do what it is told and not ask confirmation. It assumes that the user knows what he is doing. You can, of course, create an alias that asserts the -i flag. Some of the other UNIX flavors (especially on that is popular on PC's) reverse the logic and asks before doing the rm.

Re: System Administration

Wallace C. Chappell — Thu, 09 Jun 2005 12:12:41 GMT

Thanks for the input.

Re: System Administration

Rick Garland — Thu, 09 Jun 2005 12:31:13 GMT

A user who has the access to their own directories/files will have the ability to rm their stuff. All you can do is educate and/or provide them with ample warnings.

For all other situations, you will want the education/knowledge of who has the ability to do the rm command. This is a big part of knowing who has the root access, or who has UID=0 (equal to root access).

There is no sure way to prevent. You can provide additional warnings via aliasing and you can educate.

Re: System Administration

roger_122 — Thu, 09 Jun 2005 13:46:45 GMT

Its also helpful to have the PS1 variable set in the .profile so the current directory will always be displayed

(PS1=`hostname`'$PWD # ' ; export PS1)

and get in the habit of always specifying the entire path when using the rm command.

Re: System Administration

vinod_25 — Sat, 18 Jun 2005 02:41:11 GMT

hi wallace

There are safeguards that can be taken by the user to prevent an
accidental removal of files by the rm command.

1. If running ksh (Korn Shell), you can set an alias in your
.kshrc file to default rm to rm -i. This will cause rm
to prompt you for verification before removing your files
whenever rm is executed.
Enter the following file in the .kshrc file:

alias rm='rm -i'

2. Creating a file named "-i" in a directory will expand the
rm * command to rm -i, thus prompting for verification.
You must put this file in each subdirectory to safeguard it.
Create the "-i" file as follows:

echo "" > -i

regards

Vinod K