getprivgrp

[Sajjad Sahir]

/etc/privgroup

contains

dba MLOCK RTPRIO RTSCHED

I used getprivgrp command as a root user

but it showing only

dba:

file permission is rw-rw-rw

but in other servers

is showing completely(see below)

file permission is same as aboe
rw-rw-rw

hp_data1#getprivgrp dba
dba: RTPRIO MLOCK RTSCHED

[Matti_Kurkela · Accepted solution]

Don't let the /etc/privgroup file be world-writable: rw-r--r-- is enough, and world-writable is bad for security. Someone might gain unauthorized privileges by editing that file and then forcing the machine to crash.

Any changes to the /etc/privgroup file won't take effect automatically: you must use the "setprivgrp -f /etc/privgroup" command to make the changes effective, or reboot.

MK