permission strange Issue

[James R. Ferguson]

---

@Dennis Handly wrote:

> chmod 555 /path/to/file

I assume you are now implying that "scp -p" won't help?

---

This was in response to the OP saying that some transfers were with 'scp' and some with 'sftp" (for whatever reason(s).

Regards!

...JRF...

[itrc55]

Hi,

from where can i download this patch "PHCO_39232" for 11.31 version.

Note: the source system it's auto generating files with 755 permission to destination system where i see it with 700 permission.

Thanks for your support

[Dennis Handly]

>from where can I download this patch PHCO_39232 for 11.31 version.

Where you get the rest of the patches, the HPSC: 11.31 libpam_hpsec cumulative patch

The recommended patch is PHCO_41859.

[itrc55]

Hi,

Thanks my problem it's resolved now by installing PHCO_41859 patch and touch this file 

"/etc/default/BYPASS_TRUSTED_SYSTEM_UMASK_RESTRICTIONS"

Thanks i don't forget the points but i wait good answer about this questions

but what is the " Beware the security implications of doing this."

Thanks again

[James R. Ferguson]

---

@itrc55 wrote:

Thanks my problem it's resolved now by installing PHCO_41859 patch and touch this file 

"/etc/default/BYPASS_TRUSTED_SYSTEM_UMASK_RESTRICTIONS

but what is the " Beware the security implications of doing this."

---

You are reducing (a bit) the security of files and directories that are created from what a normal Trusted system would establish; no more, no less.

The Technical Knowledge Base has an article describing this in more detail:

Title: HP-UX 11i Security - Ability to Change Login UMASK on Trusted Systems from Default 077 with General Release Patches for HP-UX 11.23 and HP-UX 11.31

Document ID: emr_na-c01683323-3

Regards!

...JRF...