su: No shell/No directory! if sys is added to a users secondary group


 
Thread Tools Search this Thread
Operating Systems Solaris su: No shell/No directory! if sys is added to a users secondary group
# 15  
Old 08-12-2010
Err#13 EACCES

After analyzing the truss output found issue with the file permission, most of the directories base directories like /var, /, /etc, /usr, /bin didn't have execute permission. I corrected them, but with the /dev and /devices directory the permission are correct but I get the the error in truss.

su2.out is the out put of the truss command
Code:
# grep EACCES su2.out | head
19941/1:        33.6355 open("/var/mail/agent", O_RDONLY)               Err#13 EACCES
19964/1:        47.6427 stat64("/dev/tty", 0xFFBFFB60)                  Err#13 EACCES
19964/1:        47.6446 stat64("/dev/console", 0xFFBFFB60)              Err#13 EACCES
19964/1:        47.6464 stat64("/dev/conslog", 0xFFBFFB60)              Err#13 EACCES
19964/1:        47.6481 stat64("/dev/syscon", 0xFFBFFB60)               Err#13 EACCES
19964/1:        47.6498 stat64("/dev/systty", 0xFFBFFB60)               Err#13 EACCES
19964/1:        47.6516 stat64("/dev/wscons", 0xFFBFFB60)               Err#13 EACCES
19964/1:        47.6534 stat64("/dev/ptmx", 0xFFBFFB60)                 Err#13 EACCES
19964/1:        47.6554 stat64("/dev/ttyp0", 0xFFBFFA58)                Err#13 EACCES
19964/1:        47.6592 stat64("/dev/ptyp0", 0xFFBFFA58)                Err#13 EACCES

# ls -l /dev/tty
lrwxrwxrwx   1 root     other         26 Nov  4  2005 /dev/tty -> ../devices/pseudo/sy@0:tty
# ls -l /devices/pseudo/sy@0:tty
crw-rw-rw-   1 root     tty       22,  0 Aug 11 17:37 /devices/pseudo/sy@0:tty

# grep EACCES su2.out | grep /dev | wc -l
    1286
# grep EACCES su2.out | wc -l
    1287

Also during login attempt I got the error "/dev/null: cannot create" and "ksh: /dev/null: cannot create" . I verified the permission it was correct and I re-applied the same permission for those files. These two errors vanished. But now I have to the same to 1286 files in /devices and it's link /dev. I tried with devfsadm command, but no good the problem still persist. Could you suggest any script to read all the file permission for files under /dev and /devices and re-apply the same? or read the /dev/* from the truss command output file and re-apply the files permission and also do the same to its relevant /devices file?

Code:
# ls -l /dev/null
lrwxrwxrwx   1 root     other         27 Nov  4  2005 /dev/null -> ../devices/pseudo/mm@0:null
# ls -l /devices/pseudo/mm@0:null
crw-rw-rw-   1 root     sys       13,  2 Aug  9 19:04 /devices/pseudo/mm@0:null


Last edited by agent001; 08-12-2010 at 06:19 AM..
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Windows & DOS: Issues & Discussions

Account added to group

Hi , Is there a way to find out when an account was added to a group in Windows 2003?Could you please tell me how to find that? Regards, Maddy (1 Reply)
Discussion started by: Maddy123
1 Replies

2. UNIX for Dummies Questions & Answers

Remove a secondary group from user (Linux)

Oracle Linux 6.6 grid user's secondary groups are asmadmin,asmdba,asmoper and dba # id -a grid uid=638(grid) gid=2000(oinstall) groups=2000(oinstall),2100(asmadmin),2200(dba),2300(asmdba),2301(asmoper) I want to remove dba as the secondary group for grid and keep the remaining ones. ie. I... (5 Replies)
Discussion started by: John K
5 Replies

3. Linux

Openldap add user to secondary group

Hello, i try to add user john to secondary group, named groupB this will add as primary group, how can i add to secondary group?? dn: cn=groupB,ou=Groups,dc=ldap-server,dc=com changetype: modify add: memberuid memberuid: john (1 Reply)
Discussion started by: prpkrk
1 Replies

4. Red Hat

How to find Secondary Group only?

Hi, I would like to know how to find our secondary group of user only. I have used the command id -Gn user1 it is showing both groups of user. Primary and secondary group. (2 Replies)
Discussion started by: manoj.solaris
2 Replies

5. UNIX for Advanced & Expert Users

creating a secondary read only group with setfacl

We have created ACL's to allow two differnet groups to access some directories. You can see output from getfacl below. group::rwx group:rbauser:r-- The original group has full access, the secondary group has read only. However users in the secondary group can't see the directories. Think this... (1 Reply)
Discussion started by: dw82199
1 Replies

6. Solaris

Secondary group info source

Experts, I know when I use id it shows only the primary group information for the given user, and that info comes from passwd file. When I use groups it shows all groups user are member of, however from where come information given by groups command? grep fmtt3990 /etc/passwd... (6 Replies)
Discussion started by: fmattos
6 Replies

7. UNIX for Dummies Questions & Answers

How many user can be added to single group

Hi There, How many user can be added to a unix single group. I need this for unix and solaris. BRs -----Post Update----- I'm asking about secondary group and not primary group. All the users are having 8 character as their username. value is set for getconf LINE_MAX is... (1 Reply)
Discussion started by: maestromani
1 Replies

8. Shell Programming and Scripting

List ALL users in a Unix Group (Primary and Secondary)

Is there a command or better combination of cmds that will give me the list of Unix users in a particular Unix group whether their primary group is that group in question (information stored in /etc/passwd) or they are in a secondary group (information stored in /etc/group). So far all I got... (5 Replies)
Discussion started by: ckmehta
5 Replies

9. UNIX for Dummies Questions & Answers

Assigning existing users to a secondary group

Hi!!, I am on HP UX -11. I have created a new group and want to assign some the users to this group without changing their existing group ( The new group is the secondary group for them) Any ideas how to do it?? SAM doesnt seem to be working.. Any way of doing it from command line?? ... (1 Reply)
Discussion started by: jyotipg
1 Replies

10. UNIX for Dummies Questions & Answers

How to find All Primary and Secondary Group ID's for a user

Is there any command which can list me all the Group ID's (Primary, Secondary ) assocaited with a single user. Thanks Sanjay (2 Replies)
Discussion started by: sanjay92
2 Replies
Login or Register to Ask a Question