Shell Programming and Scripting

I'm completely lost on the point of this exercise and how it could fix anything. It could just be the ambiguous use of the phrase "the file". In your example one is a "link" and another is "special file" but none are "files".

Are there two computers involved here?

Can you give before and after examples and define the rules clearly.

Hi methyl,
I had problem while login in with any user add to the sys group. So I tried with the truss and got errors like below for truss of su - command. I looked in to the permission of the files and compared them with the other working server. It was correct, even then I reapplied the same permission then ran the truss for the su - command an found the error for /dev/null disappeared. So I wanted to do that for every single file that appeared in the truss output. Then found that execute permission for the group was missing for the mount points like /dev, /devices, /etc, /opt. This was that preventing su - to any user with sys in secondary group.

Code:

19964/1:        52.4639 stat64("/dev/null", 0xFFBFF9D0)                 Err#13 EACCES

I used the code below and found several files were having permission 0745. And I changed them all to 755. Re-applying was insanity, so droped the idea and happened to find the real problem which prevented the su -

Code:

 
#!/bin/bash
find /devices > /tmp/filelist
exec 3< /tmp/filelist
 while read i <&3
 do
  perm=`ls -ld $i | cut -c2-10`
  case ${perm} in
   rwxrwxrwx) j=0777;;
   rwxr-xr-x) j=0755;;
   r-xr-xr-x) j=0555;;
   rw-rw-rw-) j=0666;;
   rw-rw----) j=0660;;
   rw-r--r--) j=0644;;
   rw-r-----) j=0640;;
   rw-------) j=0600;;
   r--r--r--) j=0444;;
   *) echo "NewPermission: $perm"&&amp;exit;;
  esac
  #echo "chmod $j $i";chmod $j $i
 done

After fixing this I got so many file permission error in /var/adm/messages. I tried and fixed few of them but its never ending. This server is running for more than 700days, Now I have to reboot this server for a hardware maintenance and I'm scared that this server will have issue during the reboot.

So I want to do a comparison of all the files permission with another identical working server and change the different ones. I found a solaris audit tool bart to take snapshot of files permission with MD5, but this tool is not available in this server. So is there a work around to do this or any suggestions?

Permission on the /usr, /, /usr, /usr/bin, /dev, /devices was not correct.
Once that was fixed su - was working for users with sys as secondary group.

There was no significant problem with server reboot.

Thank you for replying with the resolution of this problem.