topic Re: File permission for volume group in Operating System - HP-UX

File permission for volume group

Ngoh Chean Siung — Wed, 02 Feb 2005 01:17:54 GMT

Hi,

What is the default permission, owner & group for volume group? In my system, vg00 is root:root but others vg is root:sys.
Is there any different for vg00 and others volume group such as vg01, vg02 and etc?

So, any stardard to follow?

regards.

Re: File permission for volume group

Ravi_8 — Wed, 02 Feb 2005 01:38:23 GMT

Hi,

The permissions you have is the right one.

VG00 is craeted by system at installation time hence the root:root permissions.
where as vg01 etc are craeted by admin hence the permission root:sys

Re: File permission for volume group

Ngoh Chean Siung — Wed, 02 Feb 2005 03:27:50 GMT

Hi,

1) What is default permission for vg00 and others vg? 777, 775 or ...?

2) Any impact that I changed the vg00 to root:sys?

regards.

Re: File permission for volume group

Sunil Sharma_1 — Wed, 02 Feb 2005 03:37:43 GMT

default permission fro vgoo is 755

I don't think changing ownership of vg00 from root:root to root:sys will create any problem

Sunil

Re: File permission for volume group

Ngoh Chean Siung — Wed, 02 Feb 2005 03:44:47 GMT

Hi,

How about the permission for others vg such vg01, vg02 and etc? also 775? What is the default permission for these vg?

regards.

Re: File permission for volume group

Shantaram Sahyadri — Wed, 02 Feb 2005 05:01:19 GMT

Hi,

As stated earlier vg00 is created at time of installation hence permissions are root:root
there must not be any problems if changed to root:sys, there is no default permissions as the assigned permissions are based on the umask value defined in shell env, but yes for file permissions it is better to keep it to 740 for all vg directories and its contents.

Cheers
Shantaram

Re: File permission for volume group

Bill Hassell — Wed, 02 Feb 2005 05:49:02 GMT

Volume groups and the logical volume device files for each lvol should be 740. Unfortunately, the default for umask on new isntalls has been missing which means directories are 777 and device files are 666. There is no need for ordinary users to access VG's or LV's, read or write. The permissions and ownerships should be restricted to root access only. When root mounts a filesystem, the underlying permissions for the VG/LV files are unimportant. If an lvol has world read access, any user can scan the raw data on the filesystem, possibly discovring restricted information by bypassing filesystem restrictions. World write access to VG and LV means that anyone can corrupt a filesystem or raw database information at any time, or crash the machine by changing swap data.