ps output truncated


 
Thread Tools Search this Thread
Operating Systems Solaris ps output truncated
# 15  
Old 03-21-2013
Quote:
Originally Posted by achenle
If you really need this capability for non-root users, you can set the setuid bit on the permissions for /usr/bin/pargs or /usr/ucb/ps:
Code:
chmod 4555 /usr/ucb/ps

Doing that will give all users the ability to dump the entire process argument list along with the entire process environment - for all processes.
Please don't advise that ...
Quote:
You also need to be really careful with changing permissions on Solaris base OS binaries - the standard Solaris install hard links multiple utilities to the same underlying binary, so if you change the permissions of one you change them all
Precisely. I just checked on a Solaris 10 update 2 and /usr/ucb/ps code is shared by 62 binaries, including mdb and dtrace (man isaexec to understand why). That means you basically grant root access to anyone with adding the setuid bit to ps.

---------- Post updated at 00:12 ---------- Previous update was at 00:07 ----------

Quote:
Originally Posted by solaris_1977
I read it, but still trying to understand what setting is there in other similar servers, where this is working (without sudo)
I guess pkgchk SUNWscpu will tell you. Can you post this command output ?
# 16  
Old 03-21-2013
PHP Code:
root@zrddoa_zone03:/# pkgchk SUNWscpu
root@zrddoa_zone03:/# pkgchk -l -p /usr/ucb/ps
Pathname: /usr/ucb/ps
Type
linked file
Source of link
: ../../usr/lib/isaexec
Referenced by the following packages
:
        
SUNWscpu
Current status
installed 
# 17  
Old 03-21-2013
Okay, wrong guess then.

I was expecting /usr/ucb/sparc/ps (or /usr/ucb/x86/ps , /usr/ucb/amd64/ps) to be modified, which would have been less unsecured than altering /usr/ucb/ps.

The non root user with which you see the whole argument list might have been granted extra privileges.

Is there a difference between auths and ppriv $$ output on the different servers ?
# 18  
Old 03-21-2013
No difference. Output is same for both servers.
# 19  
Old 03-22-2013
I wouldn't fight it. It wants truncated output for security. That's the reality.

If you need the ww-wide information, run the process as root.
Does non-root ps really need ww-wide information on all processes?
# 20  
Old 03-22-2013
Yes, application team requires it. One of their script calls this command and use that info for some other script.
Also, this is already working in other servers, so they relunctant to use anything else. Let me check with Oracle also.
# 21  
Old 03-22-2013
You should ask your application team fix their script. It currently rely on a buggy behavior.

Make sure the latest Solaris 10 security patches are applied.

Perhaps have some of your servers been compromised.
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Ps -ef, output getting truncated, please help

Hi All, here is an output of my command and the problem is that my output string is truncated, I want to exact the full string, I am on BASH shell, please help me out. Regards Rahul command with Output : lonss05903:cmdsvc01 /home/cmdsvc01 > ps -aef|grep 'Copy' cmdsvc01 2642 8675 ... (7 Replies)
Discussion started by: rahulkalra9
7 Replies

2. UNIX for Advanced & Expert Users

Problem piping find output to awk, 1st line filename is truncated, other lines are fine.

Today I needed to take a look through a load of large backup files, so I wrote the following line to find them, order them by size, and print the file sizes in GB along with the filename. What happened was odd, the output was all as expected except for the first output line which had the filename... (4 Replies)
Discussion started by: gencon
4 Replies

3. UNIX for Dummies Questions & Answers

output from sed getting truncated

Hi all, I have used sed command with a file of size 7KB and stored the output to another file. When i look into the output file, a few file lines at the bottom have got truncated. The sed statement i used is as below. Why does this happen and how to resolve this. SQL=`sed... (3 Replies)
Discussion started by: madhan@29
3 Replies

4. Linux

relocation truncated to fit

Hi, I am getting linking error i.e. /ade/aime_urtk/oracle/has/include/caa_ResStateListener.hxx:79: relocation truncated to fit: R_PPC_GO T16 vtable for CAA::ResourceStateListener /ade/aime_urtk/oracle/has/lib//libcaad.a(caa_Main.o)(.text+0x88e6): In function `CAA::ResourceStateL... (0 Replies)
Discussion started by: jgobbur
0 Replies

5. UNIX for Dummies Questions & Answers

File gets truncated

Hi Guys, I have a master script file. That calls the other script files. The sub script files append some of the data to the log file. Once the master script completes one sub script execution and returns to execute other sub script that appends to the same log file. the log file gets... (2 Replies)
Discussion started by: Swapna173
2 Replies

6. Shell Programming and Scripting

Truncated with a pipe?

OK, I'm stumped. I have a shell script that reads a list, and for every item in the list performs a lookup in our Active Directory. Now, it seems that when I pipe the results into grep, the complete results are not there (truncated?). I'm not sure if this is a limit of the pipe, grep, shell... (1 Reply)
Discussion started by: TheCrunge
1 Replies

7. AIX

PS truncated in AIX

folks; how can i get longer output than the one i got by using "/usr/ucb/ps awwx"? :mad: (2 Replies)
Discussion started by: moe2266
2 Replies

8. Solaris

ps truncated output

Hi Problem of ps on Solaris 8 and 9 Perhaps a silly question but I can't find a solution. the output of the command ps -ef is truncated. I've tried to change the terminal settings with stty putting a big number of colums: no change. Following the man page of ps i have set the variable... (8 Replies)
Discussion started by: renoc
8 Replies

9. UNIX for Advanced & Expert Users

ps output truncated

Hi! I have some shell scripts receiving in input lots of parameters and I need to select the ones having a particular value in one parameter. A typical shell command line is: PROMPT > shell_name.ksh -avalue_a -bvalue_b -cvalue_c -dvalue_d ... I used a combinaton of ps and grep commands... (5 Replies)
Discussion started by: pciatto
5 Replies

10. Shell Programming and Scripting

ps output truncated

Hi! I have some shell scripts receiving in input lots of parameters and I need to select the ones having a particular value in one parameter. A typical shell command line is: PROMPT > shell_name.ksh -avalue_a -bvalue_b -cvalue_c -dvalue_d ... I used a combinaton of ps and grep commands... (1 Reply)
Discussion started by: pciatto
1 Replies
Login or Register to Ask a Question