Operating System - HP-UX
1833613 Members
3390 Online
110062 Solutions
New Discussion

Change permission of system directories

 
SOLVED
Go to solution
Dewa Negara_4
Regular Advisor

Change permission of system directories

Hi All,

Because of security reasons, I want to change permission of all systems directories from 777 to 775 instead.

After monitoring for few days, I noticed that 2 directories below are always changed back to 777 with unknown reason.

Can anyone help me to explain why it happens? If I change to 775 again, I believe it will be changed back to 777 after few days.

Please help. High score will be given.

Thanks.
Negara

drwxrwxrwt 2 root sys 96 Jun 24 12:14 /var/opt/dce/rpc/local/s-0
drwxrwxrwx 2 root root 27648 Jun 24 14:52 /var/spool/sockets/pwgr

Santos
4 REPLIES 4
Rajeev  Shukla
Honored Contributor
Solution

Re: Change permission of system directories

Hi Negara,

Thats because these are system generated dynamic directories, even if they are removed and system is rebooted they will get created once again.

Rajeev
Dewa Negara_4
Regular Advisor

Re: Change permission of system directories

Hi Rajeev,

Thanks for your help.

Pls help further :

1. Is there anyway how to make them 775?
2. Except the 2 directories, what other directories belong to system dinamic directories?

Thanks.
Negara
Santos
Sanjay Kumar Suri
Honored Contributor

Re: Change permission of system directories

/var/spool/sockets/pwgr are socket files used for some network related service

Check this link as well:

http://aa11.cjb.net/hpux_admin/2001/02/0197.html

sls
A rigid mind is very sure, but often wrong. A flexible mind is generally unsure, but often right.
T G Manikandan
Honored Contributor

Re: Change permission of system directories

temporary files are created under /tmp /var/spool /var/tmp which might be anything as you might be aware that unix treats everything as files -printers anything.

Look here some of these directories need to be accessed by everyone on the system.

It might be okay that they are with 777 but make sure they are with 1777 which would enable the sticky bit on those directories.