want to run mknod as oracle?

[Doug Stuns]

I want to run mknod as oracle compress some large files as they are built. I think I need to set the SETUID on the mknod by performing the following:

chomd u=rx,u+s /sbin/mknod

However when I run as oracle I still get the following error:
netman:oracle:openview:/home/oracle >mknod
mknod: must be super-user

[Ermin Borovac]

The only thing you can do with mknod as non-root user is create named pipes.

$ /sbin/mknod pipe_file p

You can also use mkfifo to do the same.

[Indira Aramandla]

Hi Doug,

To compress large files as they are built as user Oracle you can use mkfifo (make FIFO (named pipe) special files).

This will serve your purpose.

mkfiof -p ${compress_file_path}


Indira A

[A. Clay Stephenson]

Allowing a non-root user to create devive nodes (unless they are named pipes) would be a huge security hole. If it were possible, a user could create a device node that could completely clobber a disk (eventhough a mounted filesystem already exists). You could setup sudo to allow certain users to create device nodes but I would never grant this power to a DBA. That would be a formula for disaster.

[renarios]

Hi Doug,

The best option is to mknod as root, chmod the pipe, su [-] oracle ....
The only issue is that you have to start the script as root.

To ACS: Thanks for the compliment. Your view on DBAs is not very optimistic/realistic.
If you grant such right, make good procedures. That helps a lot.

Cheerio,

Renarios