topic Re: diskinfo without root? in Operating System - HP-UX

diskinfo without root?

A. Daniel King_1 — Thu, 13 Jun 2002 21:13:09 GMT

Is there a good way to get at diskinfo-type data without being root?

I can write a SUID wrapper, but I'd like to know if there are any utilities inherent to HP-UX 11.0 - without opening potential security holes.

Thanks!

Re: diskinfo without root?

Michael Tully — Thu, 13 Jun 2002 21:51:32 GMT

Hi,

Why not setup 'sudo'? It is really easy and everything can be logged for a user that has only access to specific tasks.

You can get it here:

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.2b1/

As an example for 'diskinfo' in the /etc/sudoers file could be:

# Host alias specification

# User alias specification
User_Alias OPS = joe

# Cmnd alias specification
Cmnd_Alias OPS = /usr/sbin/diskinfo

# User privilege specification
OPS ALL=(ALL) ALL

HTH
~Michael~

Re: diskinfo without root?

A. Daniel King_1 — Thu, 13 Jun 2002 21:56:04 GMT

Good point. I've got sudo, but I'm trying to dig into HP-UX specifically. I may end up doing exactly as you suggest. However, I'm running diskinfo in a script, with loops, many disks, and I've seen loops (calling sudo) create *huge* log files. Maybe this is the only way (or just running it as root).

Re: diskinfo without root?

James R. Ferguson — Thu, 13 Jun 2002 22:01:50 GMT

Hi:

Here's a viewpoint only. If you''re dealing with 'diskinfo' and the LVM configuration at large, you probably need/want to be root in the first place. After all, as an administrator do you really want to "sub-out" these kinds of critical tasks?

Regards!

...JRF...

Re: diskinfo without root?

S.K. Chan — Fri, 14 Jun 2002 01:25:29 GMT

There is a "roundabout" way to get the "diskinfo type" output as ordinary user by using cstm. I've tried it and it works. Here goes (you may/may-not want to use this way)..
Assuming c2t6d0 ..
$ /etc/lssf /dev/rdsk/c2t6d0|awk '{print $15}'
10/0/15/0.6.0
Take this path and pass it to cstm..
$ echo "sel path 10/0/15/0.6.0;info;wait;infolog
> view
> done
> " | /usr/sbin/cstm > disk-info
Now if you look a the file it has the info you that "kindda" similar to diskinfo output. You just need to extract what you need from the file.

Re: diskinfo without root?

Steven Sim Kok Leong — Fri, 14 Jun 2002 01:41:31 GMT

Hi,

If you want it to be specifically HP-UX, try restricted sam

# /usr/sbin/sam -r

You can put diskinfo in a script with $1 parameter as the disk. Then add the script to sam and subsequently assign user privileges and allowable access to the script in sam.

Your user just needs to run (if /usr/sbin already in PATH):

# sam

Otherwise:

# /usr/sbin/sam

man 1m sam for more information.

Hope this helps. Regards.

Steven Sim Kok Leong

Re: diskinfo without root?

A. Daniel King_1 — Fri, 14 Jun 2002 14:21:01 GMT

I have the basic philosophy of 'if it can be done without root, do it without root.'

Especially when it comes to my own fat fingers.

Thanks for the replies. cstm looks like something I need to learn.