The UNIX and Linux Forums  

Go Back   The UNIX and Linux Forums > Top Forums > UNIX for Dummies Questions & Answers
Google UNIX.COM


UNIX for Dummies Questions & Answers If you're not sure where to post a UNIX or Linux question, post it here. All UNIX and Linux newbies welcome !!

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
max number of slabs per kernel module (kernel 2.6.17, suse) Brendan Kennedy Linux 4 01-23-2008 06:40 AM
How to restrict a user group to access the kernel harishankar HP-UX 0 08-08-2007 11:09 PM
Aplication user and kernel mode (data access) Brendan Kennedy High Level Programming 1 05-27-2007 02:45 PM
Kernel panic - not syncing: cannot execute a PAE-enabled kernel on PAE-less CPU dave043 Linux 2 05-09-2007 10:57 PM
Need help to access/mount so to access folder/files on a Remote System using Linux OS S.Vishwanath UNIX for Dummies Questions & Answers 2 07-30-2001 05:17 AM

Reply
 
Submit Tools LinkBack Thread Tools Display Modes
  #8  
Old 08-07-2007
Registered User
 

Join Date: Aug 2007
Posts: 28
Thanks for this !!
Well, I can find the command 'Setprivgrp' requires 2 parameters (Group ID and preiviledges). But, how can I remove the previledges for a particular thing (i.e. Kernel).
Even, I do not want to remove all the previledges for that group. I want to remove the previledges only for Kernel.
Will the 'CHOWN' command work out, any idea ?

Thanks,
Rohit..
Reply With Quote
Forum Sponsor
  #9  
Old 08-07-2007
blowtorch's Avatar
Supporter
 
Join Date: Dec 2004
Location: Singapore
Posts: 2,326
We are going back to the same question. Is the problem having anything to do with the permissions on /stand/vmunix? If the problem is with permissions on that file, then yes, the chown command will work.
Reply With Quote
  #10  
Old 08-07-2007
Registered User
 

Join Date: Aug 2007
Posts: 28
Re..

No.. I was asking how to set the permission for only kernel with 'setprivgrp' command.
As per I know, we need to give the file or directory name to provide previledges, but as for 'setprivgrp' command, we do not have any option to provide only for one file/dir. So, I want to know how can I revoke the previledges only for kernel, not for rest of the files or options for that particular group.
It will be helpful if you can explain the answer with an example.

Thanks,
Rohit..
Reply With Quote
  #11  
Old 08-07-2007
sysgate's Avatar
Unix based
 

Join Date: Nov 2006
Location: /root
Posts: 1,197
Since noone answered in 23 hours, I will ask : what kind of group control Kernel and what is your system ? Basically, you can alter kernel values, where applicable, only if you are root user.
Reply With Quote
  #12  
Old 08-07-2007
blowtorch's Avatar
Supporter
 
Join Date: Dec 2004
Location: Singapore
Posts: 2,326
I'm sorry, but I can't give examples (no access to any HP systems). You can get the existing privileges that a group has using getprivgrp. Then using setprivgrp, remove the permissions that are not required.

I can't get more specific than that, sorry.
Reply With Quote
  #13  
Old 08-07-2007
Registered User
 

Join Date: Aug 2007
Posts: 28
Smile

Yes, I also think so.. Anyway, thanks a lot for your help.. Please let me know if you get any update regarding this.

Thanks,
Rohit..
Reply With Quote
  #14  
Old 08-07-2007
Registered User
 

Join Date: Aug 2007
Posts: 28
Question

The problem is one of the group ID is having kernel access. I do not know how the group is having previledges to kernel, whereas no other groups are having this kernel access ? I need to revoke the kernel access/previledges of that particular group.
The OS is HP-UX and version may be 11.0.
The root wrongly provided the kernel previledges to one of the group. I do not know how and where the root has given these previledges ? The particular group is having all the previledges to access the kernel. Now, I need to revoke the previledges for that group, which I donot know where and how to change in the system ? If you know any command for this, then please let me know in details with an example.

Thanks,
Rohit..
Reply With Quote
Google The UNIX and Linux Forums
Reply

Thread Tools
Display Modes




All times are GMT -7. The time now is 02:17 AM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited.
The UNIX and Linux Forums Content Copyright ©1993-2008. All Rights Reserved.Ad Management by RedTyger Visit The Complex Event Processing Blog

Content Relevant URLs by vBSEO 3.2.0