topic permission issue afetr trusted system in Operating System - HP-UX

permission issue afetr trusted system

zxcv — Wed, 25 Jan 2012 04:59:11 GMT

Hi ,

I have a setup wherein am using remsh from one box to another.

as soon as i converted box a and box b trusted ,

the file getting generated on box b using remsh from box a has only 600 permissions.

I tried setting umask 017 in both boxes /etc/profile but o/p still the same.

Suggestions needed .

Thanks.

Re: permission issue after trusted system

Dennis Handly — Wed, 25 Jan 2012 06:06:44 GMT

>the file getting generated on box b using remsh from box a has only 600 permissions.

>I tried setting umask 017 in both boxes /etc/profile but output still the same.

umask permissions for remsh probably come from inetd(1m) and not /etc/profile.

Have you looked in /etc/rc.config.d/* or /etc/inetd.conf?

Also, if it comes from inetd(1m), you will need to restart that demon with:

inetd -k

inetd

Or maybe better:

/sbin/init.d/inetd stop

/sbin/init.d/inetd start

Re: permission issue after trusted system

zxcv — Wed, 25 Jan 2012 07:21:43 GMT

Hi Dennis ,

In /etc/inetd.conf i have ;

kshell stream tcp nowait root /usr/lbin/remshd remshd -K

where am i supposed to make that umask entry ?

Re: permission issue after trusted system

zxcv — Wed, 25 Jan 2012 09:07:52 GMT

Hi Dennis ,

I am using both ssh and remsh.

for remsh i found its /etc/default/security

for ssh i think should be sshd_config file right ??

Re: permission issue after trusted system

rariasn — Wed, 25 Jan 2012 09:20:19 GMT

Hi:

man inetd

The Internet daemon and the servers it starts inherit the LANG and TZ environment variables and the umask of the process that started inetd. If inetd is started by the superuser, it inherits the superuser's
umask, and passes that umask to the servers it starts.

# umask 017

# inetd -k

# inietd

Verify 'umask' entry in /sbin/init.d/inetd file

rgs,

Re: permission issue after trusted system

Dennis Handly — Wed, 25 Jan 2012 09:29:00 GMT

>for ssh I think should be sshd_config file right?

Yes, that's what I saw.

>Verify 'umask' entry in /sbin/init.d/inetd file

On a untrusted system, I saw it set to 000.

Re: permission issue after trusted system

zxcv — Wed, 25 Jan 2012 09:36:39 GMT

Hi Rariasn,

I tried after editing that entry in /sbin/init.d/inetd but still the same permissions .

box A contains ssh passwordless script which logins to box B ( trusted ) and creates file of 600 permissions , i want it to be 644.

Re: permission issue after trusted system

zxcv — Wed, 25 Jan 2012 09:37:52 GMT

Hi Dennis ,

Then what entry to be edited in sshd_config related to umask.

Re: permission issue after trusted system

Dennis Handly — Wed, 25 Jan 2012 22:26:27 GMT

>Then what entry to be edited in sshd_config related to umask.

Oops, wrong file. There is SftpUmask in /opt/ssh/etc/sshd_config.

But my file was /etc/rc.config.d/sshd:

There should be a variable with UMASK in it:

SSHD_UMASK=000 # The acceptable values of ...

Re: permission issue after trusted system

zxcv — Wed, 25 Jan 2012 09:54:58 GMT

Hi Dennis ,

No entry with UMASK variable.

Re: permission issue after trusted system

Duncan Edmonstone — Wed, 25 Jan 2012 10:40:47 GMT

Am I missing something here? Why don't you just alter your script to set umask on box B explicitly right before you create the file? Or just chmod it after you created it?

Re: permission issue after trusted system

zxcv — Wed, 25 Jan 2012 11:11:11 GMT

Hi Duncan ,

You were spot on .

I just edited that script to add umask line.

Thank you very much.