UNIX for Advanced & Expert Users

Hi,

In our bank production environment - IBM AIX 5.3, we have a particular parent folder inside which an application creates temporary folders & files. These temp folders exist for the lifetime of the user session within the application and then get deleted automatically.

Since these temp folders contain business data, the default permissions is set to 700.

However, frequent 100% utilization of the parent folder now requires me as an application administrator to run usage scripts for housekeeping & information purposes.

The problem: I cannot review usage of the temp folders (due to 700) default setting. We cannot run such scripts via root as per our system admin policies.

What can be done for this ?

Is there anyway to set a default ACL for each new folder/file that gets created and allow access to my application admin user ID ? At least it will allow me to run ls -lR or du command successfully in such cases.

Any help is welcome.

Sample ls output of the application folder:

Code:

 
ls -l /application/saswork

Code:

drwx------ 3 psath118 sasthusr 4096 Jul 13 16:04 SAS_work00D40014C012_saixp82
drwx------ 3 psath054 sasthusr 256 Jul 13 14:17 SAS_work01B3001720A0_saixp82
drwx------ 3 psath043 sasthusr 256 Jul 13 15:21 SAS_work032700131072_saixp82
drwx------ 3 psath060 sasthusr 256 Jul 12 19:50 SAS_work04BB001C5080_saixp82
drwx------ 3 psath043 sasthusr 256 Jul 12 12:28 SAS_work063B0014108E_saixp82
drwx------ 3 psath118 sasthusr 256 Jul 13 16:06 SAS_work06AE000CA08E_saixp82
drwx------ 3 psath007 sasthusr 256 Jul 13 16:05 SAS_work0A790014A080_saixp82

Regards

You can use NFSv4 ACL inheritance flags. Add something like this to your ACL:

Code:

u:your_user: a rwxRAwCc fidi

Note: You *may* need to convert first your current ACL from AIXC to NFSv4.