Sponsored Content
Full Discussion: Root Priviledges
Special Forums Cybersecurity Root Priviledges Post 11944 by Neo on Friday 14th of December 2001 12:09:17 PM
Old 12-14-2001
As PxT begins to explain, you can enable access control lists (ACLs) on HP-UX that provide many additional layers of access-control for HP-UX objects. This includes regular files, directories, system calls, etc. The use of ACLs is very powerful, but requires some experience to use effectively. BTW: ACLs are generally disabled by default and must be enabled (at the kernel level) and configured (at the adminstration level).
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

root priviledges

How do you determine which users have permission to use root priviledges? (4 Replies)
Discussion started by: Ben070371
4 Replies

2. UNIX for Dummies Questions & Answers

Run non-root script as root with non-root environment

All, I want to run a non-root script as the root user with non-root environment variables with crontab. The non-root user would have environment variables for database access such as Oracle or Sybase. The root user does not have the Oracle or Sybase enviroment variables. I thought you could do... (2 Replies)
Discussion started by: bubba112557
2 Replies

3. UNIX for Advanced & Expert Users

Question on UserID with "root" priviledges

I know we can create a normal UserID with "root" priviledges by assigning the user into the "root" group. As such, everything that is modified by the UserID will also contain "root" as the group and ID. This is return causes less tracability on who made the change onto a certain file, etc. My... (3 Replies)
Discussion started by: Alvin
3 Replies

4. AIX

Can't login root account due to can't find root shell

Hi, yesterday, I changed root's shell in /etc/passwd, cause a mistake then I can not log in root account (can't find correct shell). I attempted to log in single-mode, however, it prompted for single-mode's password then I type root's password but still can not log in. I'm using AIX 5L version 5.2... (2 Replies)
Discussion started by: neikel
2 Replies

5. UNIX for Dummies Questions & Answers

How to allow access to some commands having root privleges to be run bu non root user

hi i am new to unix and i have abig task. i have to \run particular commands having root privileges from a non root user. i know sudo is one of the way but i need sum other approach kindly help Thanks (5 Replies)
Discussion started by: suryashikha
5 Replies

6. AIX

user account priviledges

Hi Admins, As per my knowledge there are two types of user accounts in unix. root and normal users. If there are any user types for which we can give some priviledges..? Actually i want to restrict root access and create new accounts for admins with some of the priviledges. Please let me... (6 Replies)
Discussion started by: newsol
6 Replies

7. Solaris

Lost Root Password on VXVM Encapsulated Root Disk

Hi All Hope it's okay to post on this sub-forum, couldn't find a better place I've got a 480R running solaris 8 with veritas volume manager managing all filesystems, including an encapsulated root disk (I believe the root disk is encapsulated as one of the root mirror disks has an entry under... (1 Reply)
Discussion started by: sunnyd76
1 Replies

8. Solaris

Migration of system having UFS root FS with zones root to ZFS root FS

Hi All After downloading ZFS documentation from oracle site, I am able to successfully migrate UFS root FS without zones to ZFS root FS. But in case of UFS root file system with zones , I am successfully able to migrate global zone to zfs root file system but zone are still in UFS root file... (2 Replies)
Discussion started by: sb200
2 Replies

9. Shell Programming and Scripting

Find users with root UID or GID or root home

I need to list users in /etc/passwd with root's GID or UID or /root as home directory If we have these entries in /etc/passwd root:x:0:0:root:/root:/bin/bash rootgooduser1:x:100:100::/home/gooduser1:/bin/bash baduser1:x:0:300::/home/baduser1:/bin/bash... (6 Replies)
Discussion started by: anil510
6 Replies

10. UNIX for Dummies Questions & Answers

Can you gain root privileges if the suid program does not belong to root?

I had a question in my test which asked where suppose user B has a program with 's' bit set. Can user A run this program and gain root privileges in any way? I suppose not as the suid program run with privileges of owner and this program will run with B's privileges and not root. (1 Reply)
Discussion started by: syncmaster
1 Replies
FFS(7)						       BSD Miscellaneous Information Manual						    FFS(7)

NAME
ffs -- Berkeley fast file system SYNOPSIS
In the kernel configuration file: options FFS options QUOTA options SOFTUPDATES options SUIDDIR options UFS_ACL options UFS_DIRHASH options UFS_EXTATTR options UFS_EXTATTR_AUTOSTART In fstab(5): /dev/disk0a /mnt ufs rw 1 1 DESCRIPTION
The Berkeley fast file system provides facilities to store file system data onto a disk device. ffs has been optimized over the years for speed and reliability and is the default FreeBSD file system. Quotas options QUOTA This option allows system administrators to set limits on disk usage on a per-user basis. Quotas can be used only on file systems mounted with the quota option; see quota(1) and edquota(8). Soft Updates options SOFTUPDATES The soft updates feature tracks writes to the disk and enforces metadata update dependencies (e.g., updating free block maps) to ensure that the file system remains consistent. To enable soft updates on an unmounted file system, use the following command: tunefs -n enable fs fs can be either a mount point listed in fstab(5) (e.g., /usr), or a disk device (e.g., /dev/da0a). File Ownership Inheritance options SUIDDIR For use in file sharing environments on networks including Microsoft Windows and Apple Macintosh computers, this option allows files on file systems mounted with the suiddir option to inherit the ownership of its directory, i.e., ``if it's my directory, it must be my file.'' Access Control Lists options UFS_ACL Access control lists allow the association of fine-grained discretionary access control information with files and directories. This option requires the presence of the UFS_EXTATTR option, and it is recommended that UFS_EXTATTR_AUTOSTART is included as well, so that ACLs are enabled atomically upon mounting the file system. In order to enable support for ACLs, two extended attributes must be available in the EXTATTR_NAMESPACE_SYSTEM namespace: posix1e.acl_access, which holds the access ACL, and posix1e.acl_default, which holds the default ACL for directories. If you are using file system extended attributes, the following commands may be used to allocate space for and create the necessary EA backing files for ACLs in the root of each file system. In these examples, the root file system is used; see Extended Attributes for more details. mkdir -p /.attribute/system cd /.attribute/system extattrctl initattr -p / 388 posix1e.acl_access extattrctl initattr -p / 388 posix1e.acl_default On the next mount of the root file system, the attributes will be automatically started (if UFS_EXTATTR_AUTOSTART is included in the kernel configuration), and ACLs will be enabled. Directory Hashing options UFS_DIRHASH Implements a hash-based lookup scheme for directories in order to speed up accesses to very large directories. Extended Attributes options UFS_EXTATTR Extended attributes allow the association of additional arbitrary metadata with files and directories, which can be assigned and retrieved from userland as well as from within the kernel; see extattrctl(8). options UFS_EXTATTR_AUTOSTART If this option is defined, ffs will search for a .attribute subdirectory of the file system root during the mount operation. If found, extended attribute support will be automatically started for that file system. The following sysctl(8) MIBs are defined for use with ffs: vfs.ffs.doasyncfree Asynchronously write out modified i-node and indirect blocks upon reallocating file system blocks to be contiguous. (Default: 1.) vfs.ffs.doreallocblks Enable support for the rearrangement of blocks to be contiguous. (Default: 1.) SEE ALSO
quota(1), acl(3), extattr(3), edquota(8), extattrctl(8), sysctl(8) M. McKusick, W. Joy, S. Leffler, and R. Fabry, "A Fast File System for UNIX", ACM Transactions on Computer Systems, 2, 3, 181-197, August 1984. M. McKusick, "Soft Updates: A Technique for Eliminating Most Synchronous Writes in the Fast Filesystem", Proceedings of the Freenix Track at the 1999 Usenix Annual Technical Conference, 71-84, June 2000. BSD
December 26, 2001 BSD
All times are GMT -4. The time now is 12:09 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy