topic Re: Prevent changes to config files in Operating System - HP-UX

Prevent changes to config files

ISS Unix Admin — Tue, 14 Nov 2000 02:39:19 GMT

I have created various configuration files for HPUX clients to use with IgniteUX, based on software requirements and hardware configurations.

I don't want users to have the ability to change these configurations via the IgniteUI when they Ignite their servers. The only option I want to give them is the ability to select the correct configuration, but still be able to see what the configuration consist of i.e. they can move to the various tabbed interfaces in the UI and can see whats configured - but must not be able to change anything including marking or unmarking software.

Is this possible and if so how can it be achieved.

Thanks

Re: Prevent changes to config files

CHRIS_ANORUO — Tue, 14 Nov 2000 11:08:36 GMT

set the permissions to read only

Re: Prevent changes to config files

Carol Garrett — Tue, 14 Nov 2000 11:49:49 GMT

I think the options you need to change and experiment with are in the config.full file for the host in question on the ignite server. Variables are;

RUN_UI=TRUE
RUN_SD=TRUE
SD_USE_UI=FALSE
CONTROL_FROM_SERVER=FALSE
HALT_WHEN_DONE=FALSE
USE_EXPERT_UI=FALSE
CLEAN_ALL_DISKS=FALSE
HIDE_BOOT_DISK=FALSE
ERROR_IF_BAD_SW=FALSE
RECOVERY_MODE=TRUE
DISABLE_DHCP=FALSE

Try setting to FALSE RUN_UI and test it. If not what you wanted try modifying some of the others and testing them also.

Re: Prevent changes to config files

Hooi Siew Hoong — Thu, 14 Dec 2000 19:30:04 GMT

Your could edit the config files and remove the word 'init' of any software selections that you do not wish to let other mark or unmark. And then setting the selection to TRUE or FALSE will default it to mark and unmark respectively.

sw_sel "B3929BA" {
description = "HP OnLineJFS (Advanced VxFS)"
sw_source = "core"
sw_category = "OrderedApps"
sd_software_list = "B3929BA,r=B.11.00,a=HP-UX_B.11.00_32/64,v=HP"
(_hp_os_bitness == "32") {
impacts = "/usr" 362Kb
impacts = "/" 10Kb
}
(_hp_os_bitness == "64") {
impacts = "/usr" 591Kb
impacts = "/" 10Kb
}
} = TRUE

And setting the permission of the config file to -r- will seal the fate.

cheers

Re: Prevent changes to config files

marc seguin — Thu, 04 Jan 2001 15:31:13 GMT

The above answer is the right one.
The keyword "init" is used to set a configuration as a default one.
But if you don't want to be able to moify it, remove this keyword, for both variables and configurations :

init _hp_pri_swap = MEMORY * 2
becomes
_hp_pri_swap = MEMORY * 2

init sw_sel "EE pack" =TRUE
becomes
sw_sel "EE pack" =TRUE

you can use the keyword is_visible =false for some parts you don't want to appear, and then that you can't modify.
But the "read only" permission won't do what you want, neither RUN_UI and other variables.