execute permission denied on LD which installing Kernel patches

[David Connolly]

Hi.

SWAGENT.LOG shows execute permission denied on LD which installing Kernel patches. The LD executable has 555 permissions in /usr/ccs/bin.

Please help!

Clip from swagent.log
* Installing fileset "PHNE_25484.NIS-SERVER,r=1.0" (23 of 76).
* Installing fileset "PHNE_25484.NISPLUS-CORE,r=1.0" (24 of 76).
NOTE: Building a new kernel based on template file "/stand/system"
Generating module: krm...
/usr/bin/sh: /usr/ccs/bin/ld: Execute permission denied.
*** Error exit code 1

Stop.
make failure.
ERROR: The command "/usr/sbin/mk_kernel", which is used to rebuild
the kernel, has failed. Because kernel-related filesets were
installed, this command must be executed by "swinstall",
without failures, before the load can continue. Check the
above output for details about the failure.
NOTE: The Install Phase has suspended. Check the above output for
reasons.


* Aborting the Install Phase.

======= 09/17/02 08:15:53 BST END install AGENT SESSION (Aborted)
(pid=369)

[Paula J Frazer-Campbell]

David

I am going to ask the obvious, are you doing this as root?

Also chech the permissions down the chain to the file (Dirs)

HTH

Paula

[David Connolly]

Thanks Paula,

I'm running swinstall as root, and execute permissions are all the way down the tree.

Dave

[David Connolly]

I probably should have mentioned that the box has been "hardened". I don't have the hardening policy, but I would have thought that if the file has execute permissions, and I am root, it would run.

[Paula J Frazer-Campbell]

David

There a lots of dependant patches associated with PHNE_25484, check them out here:-


http://www4.itrc.hp.com/service/patch/mainPage.do


HTH

Paula

[Dietmar Konermann · Accepted solution]

"Execute permission denied" may also be caused by corrupted executables. So make sure that your /usr/ccs/bin/ld is valid.

Try to execute it "manually" from command line. Compare the cksum with another system, etc.

If you encounter inconsistencies... the executable comes e.g. with PHSS_26262. So you may install this patch to get a clean state.

Also a good idea:
# swverify OS-Core.C-KRN
# swverify PHSS_26262

Regards...
Dietmar.

[Paula J Frazer-Campbell]

David

Try 755 for file permission.


Paula

[David Connolly]

Thanks folks,

I think i've found the problem. A bunch of files in /usr/ccs/bin are 0 bytes or the incorrect size. I've no idea how this could have happened, and it's unlikely that it's part of the hardening, as another identically hardened machine has the files intact.

I'll copy the files from another box.

Cheers
Dave