10.20 permission problems

[Richard Babowicz_1]

Okay, I goofed. I used one of those public domain security check routines on my
887 server running 10.20 to check the security level of the machine.

I following several of the recommendation and changed many files from bin to
root and chaned some permission from world read to owner only read, etc. Well
now it is really acting crazy.

sendmail doesn't work. I can try to send mail, but it does not get there and I
can find no trace of the mail file. Accounting quit. When I do su from my user
account I get:


su
Password:
(after I enter the correct password)
setgroups: Not owner
setgroups: Not owner
su: Unable to initialize group acces list

and I'm back in my user account.

I changed too many items at once to even guess where I messed up.

Any ideas of where to look and for what?

Rich

[Melvyn Burnard_1]

Oh Dear ! ;-}
Did you not keep the list in an email or printout somewhere?
I would suggest you do the following:

check these permissions:
$ ll /etc/passwd /usr/bin/login /usr/bin/su
-r--r--r-- 1 root sys 15678 Feb 2 19:19 /etc/passwd
-r-sr-xr-x 1 root bin 73728 Jan 21 1998 /usr/bin/login
-r-sr-xr-x 1 root bin 20480 Feb 20 1998 /usr/bin/su

Then if these are ok, check permission of /:

ll -d /


Next option would be to check for the files changed on the date you did this
work

abnd finally do a:
swverify \* > myfile

and then view the output to see what gets reported as incorrect there, probably
referring you to
/var/adm/sw/swagent.log

Last but not least, a backup recovery from a known good backup would be and
idea.