Operating System - HP-UX
1835396 Members
2852 Online
110078 Solutions
New Discussion

Prevent changes to config files

 
ISS Unix Admin
Occasional Advisor

Prevent changes to config files

I have created various configuration files for HPUX clients to use with IgniteUX, based on software requirements and hardware configurations.

I don't want users to have the ability to change these configurations via the IgniteUI when they Ignite their servers. The only option I want to give them is the ability to select the correct configuration, but still be able to see what the configuration consist of i.e. they can move to the various tabbed interfaces in the UI and can see whats configured - but must not be able to change anything including marking or unmarking software.

Is this possible and if so how can it be achieved.

Thanks
4 REPLIES 4
CHRIS_ANORUO
Honored Contributor

Re: Prevent changes to config files

set the permissions to read only
When We Seek To Discover The Best In Others, We Somehow Bring Out The Best In Ourselves.
Carol Garrett
Trusted Contributor

Re: Prevent changes to config files


I think the options you need to change and experiment with are in the config.full file for the host in question on the ignite server. Variables are;

RUN_UI=TRUE
RUN_SD=TRUE
SD_USE_UI=FALSE
CONTROL_FROM_SERVER=FALSE
HALT_WHEN_DONE=FALSE
USE_EXPERT_UI=FALSE
CLEAN_ALL_DISKS=FALSE
HIDE_BOOT_DISK=FALSE
ERROR_IF_BAD_SW=FALSE
RECOVERY_MODE=TRUE
DISABLE_DHCP=FALSE

Try setting to FALSE RUN_UI and test it. If not what you wanted try modifying some of the others and testing them also.
Hooi Siew Hoong
Occasional Advisor

Re: Prevent changes to config files

Your could edit the config files and remove the word 'init' of any software selections that you do not wish to let other mark or unmark. And then setting the selection to TRUE or FALSE will default it to mark and unmark respectively.

sw_sel "B3929BA" {
description = "HP OnLineJFS (Advanced VxFS)"
sw_source = "core"
sw_category = "OrderedApps"
sd_software_list = "B3929BA,r=B.11.00,a=HP-UX_B.11.00_32/64,v=HP"
(_hp_os_bitness == "32") {
impacts = "/usr" 362Kb
impacts = "/" 10Kb
}
(_hp_os_bitness == "64") {
impacts = "/usr" 591Kb
impacts = "/" 10Kb
}
} = TRUE


And setting the permission of the config file to -r- will seal the fate.

cheers
marc seguin
Regular Advisor

Re: Prevent changes to config files

The above answer is the right one.
The keyword "init" is used to set a configuration as a default one.
But if you don't want to be able to moify it, remove this keyword, for both variables and configurations :

init _hp_pri_swap = MEMORY * 2
becomes
_hp_pri_swap = MEMORY * 2

init sw_sel "EE pack" =TRUE
becomes
sw_sel "EE pack" =TRUE

you can use the keyword is_visible =false for some parts you don't want to appear, and then that you can't modify.
But the "read only" permission won't do what you want, neither RUN_UI and other variables.