changing permission on /dev/rmt files

[Jay Cantwell]

I am doing a security lockdown of one of my HP servers. Currently my backup dev files have the permissions of crw-rw-rw- and I need to remove the world (other) rw. What does the crw mean and what command do I use to change the permissions to crw-rw----...

thanks

[Pete Randall]

The crw indicates that it's a character mode device file. I don't know if chmod will work on a device file or not - did you try it?


Pete

[Pete Randall]

Actually, I just tried chmod on a tape device file. It worked fine:

#chmod o-w /dev/rmt/c6t0d0BESTnb
t# ll /dev/rmt/c6t0d0BESTnb
crw-rw-r-- 1 bin bin 205 0x0600c0 Mar 16 10:06 /dev/rmt/c6t0d0BE
STnb

Pete

[Steven E. Protter]

So the only user that will be allowed to write or read a tape device is root?

That is the result of implementing Pete's solution.

SEP

[A. Clay Stephenson]

That would be chmod 660 /dev/rmt/* BUT you also need to do a chown root:bin /dev/rmt/* or a chown root:bin /dev/rmt/* to insure that no other users own the device nodes.