topic Re: Fixing permissions in Operating System - HP-UX

Fixing permissions

rmueller58 — Tue, 16 Apr 2002 13:07:50 GMT

We had a person that had root access do a
chown -R bogus:bogus * from the Root directory on our N-Class server..

What a night.

We restored from tape however directories and many files still show incorrect permissions.. Does anyone here have any pearls of wisdom short of handing out resumes that might aid us in the recover process?

Constructive input is great appreciated..

Re: Fixing permissions

Christopher McCray_1 — Tue, 16 Apr 2002 13:11:26 GMT

Probably the quickest way (about 2 hours), would be to insert your handy dandy ignite tape, assuming you have one that is current enough (restor frome tape afterward if not). It is you system image, so everything will be restored as it was.

Good luck
Chris

Re: Fixing permissions

A. Clay Stephenson — Tue, 16 Apr 2002 13:15:12 GMT

The most critical files are going to be those in vg00 where it is essential that owner/group/setuid/setgid settings are correct. If you have a recent make_tape_recovery image, that would be your least evil and most reliable option. The stuff in the other VG's is generally much easier to reset manually.

Plan B: If you have a similar known good system, you could do a find scan on the filesystems and create a file listing filename, owner, group, and permissions and use that to feed a script on your bad system.

Re: Fixing permissions

James Beamish-White — Tue, 16 Apr 2002 13:16:10 GMT

You restored from tape and yet had wrong permissions? Are you sure your restore worked correctly? It hsould restore appropriate permissions.

Otherwise, you'll have to find a working system, do something like:

find / -exec ls -ld {} \; | awk '{print $1,$9}' > permissionslist.txt

to get all the file permissions, then write a script to parse this file on the broke machine and set permissions accordingly. Something using cut -c...

A very slow way, but it should work...

Cheers,
James

Re: Fixing permissions

harry d brown jr — Tue, 16 Apr 2002 13:16:54 GMT

Rex,

What kind of backup did you restore from? Some backup's allow you to overwrite the existing ownerships with what is on tape. Another way is to create an INDEX of what is on tape and what the ownerships WERE, then write a script to "restore" those ownerships. Of course you did give that person that changed them a good caning?

live free or die
harry

Re: Fixing permissions

John Palmer — Tue, 16 Apr 2002 13:17:12 GMT

Have you seen this previous answer for restoring system file permissions:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xa7ef6c96588ad4118fef0090279cd0f9,00.html

Regards,
John

Re: Fixing permissions

James R. Ferguson — Tue, 16 Apr 2002 13:19:20 GMT

Hi:

Andreas Voss once wrote a script to fix this very kind of problem:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xa7ef6c96588ad4118fef0090279cd0f9,00.html

Otherwise, if you are on 11.x, have a look at the 'check_patches' utility (see the man pages).

Regards!

...JRF...

Re: Fixing permissions

rmueller58 — Tue, 16 Apr 2002 13:19:24 GMT

We restored using an frecover tape.

We are able to get in a do things now but many subsystems ie printing etc, are still not working..

Re: Fixing permissions

Carlos Fernandez Riera — Tue, 16 Apr 2002 13:22:06 GMT

See:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xa7ef6c96588ad4118fef0090279cd0f9,00.html

Re: Fixing permissions

harry d brown jr — Tue, 16 Apr 2002 13:29:44 GMT

This is a good start:

Great topic:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x96b70bce6f33d6118fff0090279cd0f9,00.html
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x316efd3f91d3d5118ff40090279cd0f9,00.html

Great help in finding them:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x1e6f84534efbd5118ff40090279cd0f9,00.html

live free or die
harry

Re: Fixing permissions

rmueller58 — Tue, 16 Apr 2002 13:37:23 GMT

so the check_patches utility should be able to find the correct ones they what would be the best method to fix them?

Re: Fixing permissions

Carlos Fernandez Riera — Tue, 16 Apr 2002 13:43:17 GMT

At least all for all system files patches/executables.

For users files you must write a script that read you backup tape ( only listing), and run chown for each file....

If you use tar:

tar tvf /dev/rmt/xxx > /tmp/list.1
and then awk'd list.1

Re: Fixing permissions

James Beamish-White — Tue, 16 Apr 2002 13:53:45 GMT

Just a note, I think you should assign some points to the help you have been given above. You don't seem good at doing so.

Cheers,
James

Re: Fixing permissions

rmueller58 — Tue, 16 Apr 2002 14:08:02 GMT

another problem,

is there a quick fix to reactivate accounts globally?

Re: Fixing permissions

James R. Ferguson — Tue, 16 Apr 2002 14:13:56 GMT

Hi Rex:

You need to open a new thread for a new question.

Also, you need to score ALL responses with something, even if that's an "N/A", although based on virtually every response thus far in this thread you have received a great out-pouring of help.

...JRF...

Re: Fixing permissions

rmueller58 — Mon, 15 Aug 2005 08:28:30 GMT

Closing old items - sorry for the delay.