Bug In SHOW PROC/CONT ?

Robert Atkinson — Tue, 03 Feb 2009 10:33:47 GMT

As you can see from the output below, if I try to show a process using my own username (which is in the same group as the target process), it works fine.

If I try to use the SYSTEM account with privileges, it refuses to display the process using the process name, but will using the ID.

Do you think this a bug? I'm running IA64 8.3-1H1.

Rob.

ELGAR_ROB$ shp dayedibatch

Process DAYEDIBATCH 18:51:25

State HIB Working set 967

Cur/base priority 6/4 Virtual pages 19448

Current PC FFFFFFFF.80605530 CPU time 0 00:09:50.20

Current PSL 00000000 Direct I/O 11013093

Current user SP 033A3A30 Buffered I/O 15646

PID 20400DF9 Page faults 35491

UIC [ITOPS,BATCH_OP] Event flags C0000001
80000000

$1$DGA2:[VISX6.RELB.][BIN]VISTAX64.EXE;5

ELGAR_ROB$ lo

Console port - leaving OPCOM messages intact....

RAA logged out at 14-JAN-2009 18:51:28.32

Welcome to HP OpenVMS Industry Standard 64 Operating System, Version V8.3-1H1

Username: system
Password:
HP OpenVMS Industry Standard 64 Operating System, Version V8.3-1H1 on node EL
GAR
Last interactive login on Wednesday, 14-JAN-2009 18:02:03.09
Last non-interactive login on Monday, 2-FEB-2009 12:47:41.37

ELGAR_SYSTEM$ shp dayedibatch
%SYSTEM-W-NONEXPR, nonexistent process
ELGAR_SYSTEM$ shb
OpenVMS User Processes at 14-JAN-2009 18:51:48.18
Total number of users = 2, number of processes = 37

Username Node Process Name PID Terminal
......
BATCH_OP ELGAR DAYDATAWH 20400E05 (Batch)
BATCH_OP ELGAR DAYEDIBATCH 20400DF9 (Batch)
BATCH_OP ELGAR DAYGBSMOVUPD 20400DF5 (Batch)
......

ELGAR_SYSTEM$ shp /id=20400DF9

Process DAYEDIBATCH 18:51:58

State HIB Working set 967

Cur/base priority 5/4 Virtual pages 19448

Current PC FFFFFFFF.80605530 CPU time 0 00:10:09.01

Current PSL 00000000 Direct I/O 11491084

Current user SP 033A3A30 Buffered I/O 15665

PID 20400DF9 Page faults 35491

UIC [ITOPS,BATCH_OP] Event flags C0000001
80000000

$1$DGA2:[VISX6.RELB.][BIN]VISTAX64.EXE;5

ELGAR_SYSTEM$ show proc/priv

14-JAN-2009 18:52:02.68 User: SYSTEM Process ID: 20400E10
Node: ELGAR Process name: "SYS_SYSTEMMANA0"

Authorized privileges:
ACNT ALLSPOOL ALTPRI AUDIT BUGCHK BYPASS
CMEXEC CMKRNL DIAGNOSE DOWNGRADE EXQUOTA GROUP
GRPNAM GRPPRV IMPERSONATE IMPORT LOG_IO MOUNT
NETMBX OPER PFNMAP PHY_IO PRMCEB PRMGBL
PRMMBX PSWAPM READALL SECURITY SETPRV SHARE
SHMEM SYSGBL SYSLCK SYSNAM SYSPRV TMPMBX
UPGRADE VOLPRO WORLD

Process privileges:
ACNT may suppress accounting messages
ALLSPOOL may allocate spooled device
ALTPRI may set any priority value
AUDIT may direct audit to system security audit log
BUGCHK may make bug check log entries
BYPASS may bypass all object access controls
CMEXEC may change mode to exec
CMKRNL may change mode to kernel
DIAGNOSE may diagnose devices
DOWNGRADE may downgrade object secrecy
EXQUOTA may exceed disk quota
GROUP may affect other processes in same group
GRPNAM may insert in group logical name table
GRPPRV may access group objects via system protection
IMPERSONATE may impersonate another user
IMPORT may set classification for unlabeled object
LOG_IO may do logical i/o
MOUNT may execute mount acp function
NETMBX may create network device
OPER may perform operator functions
PFNMAP may map to specific physical pages
PHY_IO may do physical i/o
PRMCEB may create permanent common event clusters
PRMGBL may create permanent global sections
PRMMBX may create permanent mailbox
PSWAPM may change process swap mode
READALL may read anything as the owner
SECURITY may perform security administration functions
SETPRV may set any privilege bit
SHARE may assign channels to non-shared devices
SHMEM may create/delete objects in shared memory
SYSGBL may create system wide global sections
SYSLCK may lock system wide resources
SYSNAM may insert in system logical name table
SYSPRV may access objects via system protection
TMPMBX may create temporary mailbox
UPGRADE may upgrade object integrity
VOLPRO may override volume protection
WORLD may affect other processes in the world

Process rights:
SYSTEM resource
INTERACTIVE
LOCAL
NET$MANAGE

System rights:
SYS$NODE_ELGAR
ELGAR_SYSTEM$

Re: Bug In SHOW PROC/CONT ?

Karl Rohwedder — Tue, 03 Feb 2009 10:37:32 GMT

May I cite from HELP SHOW PROCESS page:

The specified process name must be in the same group as the
current process. You must use the /IDENTIFICATION qualifier to
look at processes outside of your group.

regards Kalle

Re: Bug In SHOW PROC/CONT ?

Robert Atkinson — Tue, 03 Feb 2009 10:55:09 GMT

Cheers Karl.

I read this, and stopped :-

Requires GROUP privilege to show other processes in the same group. Requires WORLD privilege to show processes outside your group.

I should have continued and also read this :-

You must use the /IDENTIFICATION qualifier to look at processes outside of your group.

More haste, less speed I guess....

Rob.

Re: Bug In SHOW PROC/CONT ?

Robert Atkinson — Tue, 03 Feb 2009 10:55:38 GMT

As above

Re: Bug In SHOW PROC/CONT ?

John Gillings — Tue, 03 Feb 2009 20:37:41 GMT

Robert,

Just expanding on the reason here...

Process names are only guaranteed to be unique within a UIC group. To prevent misidentification, process names can therefore only ever be used between processes in the same group. That's true for all commands and system services which accept a PID or process name.

Even within a group, it's possible to contrive to get two processes with the same name, easy with privilege, but possible for limited cases without. To be certain you're talking about the correct process, you should always use the PID.

topic Re: Bug In SHOW PROC/CONT ? in Operating System - OpenVMS

Bug In SHOW PROC/CONT ?

Re: Bug In SHOW PROC/CONT ?

Re: Bug In SHOW PROC/CONT ?

Re: Bug In SHOW PROC/CONT ?

Re: Bug In SHOW PROC/CONT ?