topic Re: PROBLEMS WITH ACL-PART2 in Operating System - HP-UX

PROBLEMS WITH ACL-PART2

avm — Tue, 13 Mar 2001 13:33:17 GMT

As i have mentioned in my earlier question u
have give excellent replies .Thanks a lot for those valuable information
But now my problem is that the acl is not changing because of swagent
If any body is changing or writing to the passwd file it automatically restore its bit to 444 that's my problem Is its HP specific

Re: PROBLEMS WITH ACL-PART2

Marcel Boon — Tue, 13 Mar 2001 13:44:09 GMT

Hi,

maybe the umask in the profile is set, and in some reason the acl is changed.

MB

Re: PROBLEMS WITH ACL-PART2

Wodisch — Tue, 13 Mar 2001 22:12:20 GMT

Hello avm,

as I told you before, the definition of owner, group, and
permissions is stored in the "IPD" (Installed Products
Database), which is located in files and directories below
"/var/adm/sw/products".

You would have to modify those definitions, perhaps
using "swmodify", e.g.
chmod 464 /etc/passwd
swmodify -x files=/etc/passwd OS-Core.UX-CORE

OR you just write your own startup-script, and schedule
if after "/sbin/rc2.d/S120swconfig", e.g.:
cd /sbin/init.d
cp template ldangerous
vi dangerous
ln -s /sbin/init.d/dangerous /sbin/rc2.d/S999passwd

Inside that script you would have to insert in line 100
(that is after the 'start') part) something like:
chmod 464 /etc/passwd

On next boot your script will change the permissions
before somebody can log in...

But whatever you intent - it does sound extremly
DANGEROUS!

Consider using "sudo"!!!

HTH,
Wodisch