topic Re: oracle 10g root.sh script questions in Operating System - HP-UX

oracle 10g root.sh script questions

Matthew McGee — Fri, 27 May 2005 10:33:38 GMT

Why does root.sh have to set sticky bits for the nmo and nmb executables?

Ex.

#Change owner and permissions of the remote operations executable
$CHOWN root $ORACLE_HOME/bin/nmo
$CHMOD 6750 $ORACLE_HOME/bin/nmo

#Change ownner and permissions of the program that does memory computations
$CHOWN root $ORACLE_HOME/bin/nmb
$CHMOD 6750 $ORACLE_HOME/bin/nmb

These examples set the root sticky bit for owner and group.

The script goes on to chmod on swapinfo and /dev/rdsk/*.

It then starts to set up OCR without an option to not set it up.

It also initializes Oracle cluster services. We do not want Oracle cluster services.

Has anyone else encountered this?

Thanks,

Matt

Re: oracle 10g root.sh script questions

Steven E. Protter — Fri, 27 May 2005 11:55:52 GMT

These Oracle scripts are ugly and I've encournted these issues with Oracle over the years.

Example:
1) Oracle 10g requires fuser be usable by the installation user. This is a huge security problem and I have nightmares about my last job where I left and the onsite guy has fuser enabled for the ias10g user.

2) Suid is required to set up web servers and other products that need to establish socket connections on priviledged ports below 1024. That could explain whats going on with your setup.

The OCR thing is typical oracle. Every database server install I've done the past few years installs a web server for monitoring, stopping and starting the database. It runs once on install and then is forgotten, primarily because nobody cares and oracle doesn't bother to set up auto start on hp-ux systems, something they do routinely on Linux.

SEP

Re: oracle 10g root.sh script questions

Matthew McGee — Fri, 27 May 2005 12:07:55 GMT

Can the setuid be skipped?

Re: oracle 10g root.sh script questions

Devesh Pant_1 — Fri, 27 May 2005 17:39:03 GMT

Matt,
Skipping setuid will result in issues down the road as Steve points out above. However Cluster part can be trimmed from the root.sh without any harm.

thanks
Devesh

Re: oracle 10g root.sh script questions

Jean-Luc Oudart — Sat, 28 May 2005 05:21:13 GMT

Matt

BTW this is no sticky bit but suid and sgid

cf. thread http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=458147

for explanation

Regards
Jean-Luc

Re: oracle 10g root.sh script questions

Matthew McGee — Tue, 14 Jun 2005 11:11:08 GMT

Thanks for your replies.