topic Re: swlist command in Operating System - HP-UX

swlist command

mukkala_1 — Fri, 04 Jan 2008 05:31:31 GMT

normal user required swlist command access

Re: swlist command

Torsten. — Fri, 04 Jan 2008 06:33:45 GMT

Should work by default:

#/usr/sbin/swlist

Re: swlist command

Dennis Handly — Fri, 04 Jan 2008 06:49:47 GMT

You can configure it so swlist can't be used. I.e. remove SUID bit.
Or use swacl(1m) to prevent it.

Re: swlist command

mukkala_1 — Fri, 04 Jan 2008 08:46:20 GMT

swlist command permission info

-r-sr-xr-x 11 root bin 247800 Feb 17 2007 /usr/sbin/swlist

below error i am getting while executing swlist command user level

xx1@test1[/home/test1]$ swlist
#Initializing...
#Contacting target "test1"....
WARNING: Security access denied to file " //var/adm/sw/products/INDEX".
ERROR: "test1:/": you do not have permission for this operation.
The depot owner, system administrator, or alternate root owner may need to use the "swreg" or "swacl" command to give you permission. OR, to manage applications designed and packed for nonprivileged mode, see the "run_as_superuser" option in the "sd" manpage.

Re: swlist command

Ivan Krastev — Fri, 04 Jan 2008 09:02:32 GMT

Use swacl to check what access perms are set:
# swacl -l root

And modify it:
# swacl -l root -M any_other:r

regards,
ivan

Re: swlist command

mukkala_1 — Fri, 04 Jan 2008 09:18:09 GMT

swac -l root output as follows

swacl -l rot
#
#swacl Installed software access control list
#
#For host: test1:/
#
#Date Fri jan 4 17:16:13 2008

# Object Ownership: User=root
Group=sys
Realm=test1
#
#default_realm=test1
object_owner:crwit

Re: swlist command

mukkala_1 — Fri, 04 Jan 2008 09:18:58 GMT

swac -l root output as follows

swacl -l root
#
#swacl Installed software access control list
#
#For host: test1:/
#
#Date Fri jan 4 17:16:13 2008

# Object Ownership: User=root
Group=sys
Realm=test1
#
#default_realm=test1
object_owner:crwit

Re: swlist command

mukkala_1 — Fri, 04 Jan 2008 09:30:53 GMT

is there any impact to execute this command

# swacl -l root -M any_other:r

Re: swlist command

Torsten. — Fri, 04 Jan 2008 09:40:57 GMT

This will give read access to any other user, that means you can do swlist with any other account.

the swacl -l root

output will show this with

any_other:-r---

in the last line.