PROBLEMS WITH ACL-PART2

[avm]

As i have mentioned in my earlier question u
have give excellent replies .Thanks a lot for those valuable information
But now my problem is that the acl is not changing because of swagent
If any body is changing or writing to the passwd file it automatically restore its bit to 444 that's my problem Is its HP specific

[Marcel Boon]

Hi,

maybe the umask in the profile is set, and in some reason the acl is changed.

MB

[Wodisch]

Hello avm,

as I told you before, the definition of owner, group, and
permissions is stored in the "IPD" (Installed Products
Database), which is located in files and directories below
"/var/adm/sw/products".

You would have to modify those definitions, perhaps
using "swmodify", e.g.
chmod 464 /etc/passwd
swmodify -x files=/etc/passwd OS-Core.UX-CORE

OR you just write your own startup-script, and schedule
if after "/sbin/rc2.d/S120swconfig", e.g.:
cd /sbin/init.d
cp template ldangerous
vi dangerous
ln -s /sbin/init.d/dangerous /sbin/rc2.d/S999passwd

Inside that script you would have to insert in line 100
(that is after the 'start') part) something like:
chmod 464 /etc/passwd

On next boot your script will change the permissions
before somebody can log in...

But whatever you intent - it does sound extremly
DANGEROUS!

Consider using "sudo"!!!

HTH,
Wodisch