Operating System - HP-UX
1747984 Members
4602 Online
108756 Solutions
New Discussion юеВ

Re: Can a user diferent to root run a make_tape_recovery?

 
SOLVED
Go to solution
Toscanini
Occasional Contributor

Can a user diferent to root run a make_tape_recovery?

Hi all,

I need to do a make_tape_recovery with another user diferent root.

Bat I have the following error: "you have to be root to use make_tape_recovery"

What permision must have any user to run make_tape_recovery?

Are some documents about this question??

Thanks in avancen
Tosca.-
6 REPLIES 6
A. Clay Stephenson
Acclaimed Contributor

Re: Can a user diferent to root run a make_tape_recovery?

In order to run make_tape_recovery the effective UID must be zero. In any event, only root would have sufficient permissions to actually read all of the needed data. You are actually making copies of some sensitive data so a casual user should not be allowed to do a make_tape_recovery and then restore on another machine.
If it ain't broke, I can fix that.
Toscanini
Occasional Contributor

Re: Can a user diferent to root run a make_tape_recovery?

I'm using make_tape_recovery -AIv to save all configuration of system operation on tape.

For security politic I need to use an user different that root.

It`s pissible?
A. Clay Stephenson
Acclaimed Contributor
Solution

Re: Can a user diferent to root run a make_tape_recovery?

As plainly as I know how to state it:
"In order to run make_tape_recovery the effective userid must be zero."

You can, of course, create another user with a UID of zero and call this user "notroot" and this would work --- but it would be a huge security hole and state-of-the-art stupid.

What you could do is install sudo and allow a regular user to then execute make_tape_recovery with an effective UID
of 0 (root).

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.8p9/
If it ain't broke, I can fix that.
Toscanini
Occasional Contributor

Re: Can a user diferent to root run a make_tape_recovery?

Thanks clay,


Just one question, can this version of sudo work in HP-UX 11.00?

Tosca.-
Patrick Wallek
Honored Contributor

Re: Can a user diferent to root run a make_tape_recovery?

Those listed have been compiled on 11.11 and later. If you want 11.0 you may have to download the source code and compile it yourself.
Steven E. Protter
Exalted Contributor

Re: Can a user diferent to root run a make_tape_recovery?

Shalom Tosca,

Have to agree(not why I posted) that this utility needs access to files only root can access.

sudo: I strongly recommend the HP ported version in the Internet Express Package. I don not think it will do any good running Ignite, but have at it I'm often wrong.

11.11
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111

11.23
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1123

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com