Fixing permissions

[rmueller58]

We had a person that had root access do a
chown -R bogus:bogus * from the Root directory on our N-Class server..

What a night.

We restored from tape however directories and many files still show incorrect permissions.. Does anyone here have any pearls of wisdom short of handing out resumes that might aid us in the recover process?

Constructive input is great appreciated..

[Christopher McCray_1]

Probably the quickest way (about 2 hours), would be to insert your handy dandy ignite tape, assuming you have one that is current enough (restor frome tape afterward if not). It is you system image, so everything will be restored as it was.

Good luck
Chris

[A. Clay Stephenson]

The most critical files are going to be those in vg00 where it is essential that owner/group/setuid/setgid settings are correct. If you have a recent make_tape_recovery image, that would be your least evil and most reliable option. The stuff in the other VG's is generally much easier to reset manually.

Plan B: If you have a similar known good system, you could do a find scan on the filesystems and create a file listing filename, owner, group, and permissions and use that to feed a script on your bad system.

[James Beamish-White]

You restored from tape and yet had wrong permissions? Are you sure your restore worked correctly? It hsould restore appropriate permissions.

Otherwise, you'll have to find a working system, do something like:

find / -exec ls -ld {} \; | awk '{print $1,$9}' > permissionslist.txt

to get all the file permissions, then write a script to parse this file on the broke machine and set permissions accordingly. Something using cut -c...

A very slow way, but it should work...

Cheers,
James

[harry d brown jr]

Rex,

What kind of backup did you restore from? Some backup's allow you to overwrite the existing ownerships with what is on tape. Another way is to create an INDEX of what is on tape and what the ownerships WERE, then write a script to "restore" those ownerships. Of course you did give that person that changed them a good caning?

live free or die
harry

[John Palmer · Accepted solution]

Have you seen this previous answer for restoring system file permissions:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xa7ef6c96588ad4118fef0090279cd0f9,00.html

Regards,
John

[James R. Ferguson]

Hi:

Andreas Voss once wrote a script to fix this very kind of problem:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xa7ef6c96588ad4118fef0090279cd0f9,00.html

Otherwise, if you are on 11.x, have a look at the 'check_patches' utility (see the man pages).

Regards!

...JRF...

[rmueller58]

We restored using an frecover tape.

We are able to get in a do things now but many subsystems ie printing etc, are still not working..

[Carlos Fernandez Riera]

See:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xa7ef6c96588ad4118fef0090279cd0f9,00.html

[harry d brown jr]

This is a good start:

Great topic:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x96b70bce6f33d6118fff0090279cd0f9,00.html
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x316efd3f91d3d5118ff40090279cd0f9,00.html

Great help in finding them:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x1e6f84534efbd5118ff40090279cd0f9,00.html



live free or die
harry

[rmueller58]

so the check_patches utility should be able to find the correct ones they what would be the best method to fix them?

[Carlos Fernandez Riera]

At least all for all system files patches/executables.


For users files you must write a script that read you backup tape ( only listing), and run chown for each file....

If you use tar:

tar tvf /dev/rmt/xxx > /tmp/list.1
and then awk'd list.1

[James Beamish-White]

Just a note, I think you should assign some points to the help you have been given above. You don't seem good at doing so.

Cheers,
James

[rmueller58]

another problem,

is there a quick fix to reactivate accounts globally?

[James R. Ferguson]

Hi Rex:

You need to open a new thread for a new question.

Also, you need to score ALL responses with something, even if that's an "N/A", although based on virtually every response thus far in this thread you have received a great out-pouring of help.

...JRF...

[rmueller58]

Closing old items - sorry for the delay.