mount nosuid for dataprotector (omniback) filesystems ???

[Jean-Marc Beaudoin_1]

Good Day,

Currently our filesystems ;

/opt/omni
/etc/opt/omni
/var/opt/omni
/var/opt/omni/server/db40/dcbf
/var/opt/omni/server/db40/dcbf1
/var/opt/omni/server/db40/dcbf2
/var/opt/omni/server/db40/dcbf3
/var/opt/omni/server/db40/dcbf4
/var/opt/omni/server/db40/dcbf5
/var/opt/omni/server/db40/dcbf6

are mounted with the suid option

Our security team ask us to make then NOsuid...

Does someone see any problems with that ? Does someone have them nosuid with no problems ?

Regards,

[Doug Burton]

I would think if you have suid files in the target directory then mounting it NOSUID may be a problem. That assumes "omni" is mounted because /opt with NOSUID will me a problem.

Running...
$: find /opt/omni \( -perm -4000 -o -perm -2000 \) -type f -exec ls >
-r-sr-sr-x 1 root sys 475136 May 7 2003 /opt/omni/lbin/cat_d
-r-s------ 1 root sys 417792 Oct 2 2006 /opt/omni/lbin/inet

[David Bellamy]

Jean you do not have to run Data Protector with the suid option. We run Data Protector with the regular file systems option rwxr-xr-x