File permission for volume group

[Ngoh Chean Siung]

Hi,

What is the default permission, owner & group for volume group? In my system, vg00 is root:root but others vg is root:sys.
Is there any different for vg00 and others volume group such as vg01, vg02 and etc?

So, any stardard to follow?

regards.

[Ravi_8]

Hi,

The permissions you have is the right one.

VG00 is craeted by system at installation time hence the root:root permissions.
where as vg01 etc are craeted by admin hence the permission root:sys

[Ngoh Chean Siung]

Hi,

1) What is default permission for vg00 and others vg? 777, 775 or ...?

2) Any impact that I changed the vg00 to root:sys?

regards.

[Sunil Sharma_1]

default permission fro vgoo is 755

I don't think changing ownership of vg00 from root:root to root:sys will create any problem

Sunil

[Ngoh Chean Siung]

Hi,

How about the permission for others vg such vg01, vg02 and etc? also 775? What is the default permission for these vg?

regards.

[Shantaram Sahyadri]

Hi,

As stated earlier vg00 is created at time of installation hence permissions are root:root
there must not be any problems if changed to root:sys, there is no default permissions as the assigned permissions are based on the umask value defined in shell env, but yes for file permissions it is better to keep it to 740 for all vg directories and its contents.

Cheers
Shantaram

[Bill Hassell]

Volume groups and the logical volume device files for each lvol should be 740. Unfortunately, the default for umask on new isntalls has been missing which means directories are 777 and device files are 666. There is no need for ordinary users to access VG's or LV's, read or write. The permissions and ownerships should be restricted to root access only. When root mounts a filesystem, the underlying permissions for the VG/LV files are unimportant. If an lvol has world read access, any user can scan the raw data on the filesystem, possibly discovring restricted information by bypassing filesystem restrictions. World write access to VG and LV means that anyone can corrupt a filesystem or raw database information at any time, or crash the machine by changing swap data.