permission changed by a root user

[hmorrison]

A chmod -R 776 * was entered on a server running HPUX11.11. It seems as if the command was entered from the / directory. After this was done, nobody is able to login, when an attempt is made to login, the word password does not appear, instead the screen disappears.

[IT_2007]

Since somebody did 776 permission change at root level recursively then it would be better if you restore the system from Ignite backups.

reason for not able to see login prompt was permission issues.

# ll /usr/bin/login
-r-sr-xr-x 1 root bin 53248 Sep 13 2002 /usr/bin/login

# ll /usr/bin/passwd
-r-sr-xr-x 5 root bin 53248 Apr 28 2005 /usr/bin/passwd

[Bill Hassell]

chmod -R is one of *THE*most dangerous commands in Unix. There is no way to undo the damage because there are thousands of files and directories that must be changed -- and the permissions are different for different files. Your system is permanently damaged and must be reinstalled. If you have been make regular Ignite/UX backups (make_tape_recovery), you can get the system back enough to finish with the rest of the volume groups.

Without an Ignite backup, expect several days of downtime to reinstall (and configure) from your CDs, then restore from backup tapes.