Revoke Kernel Access..


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers Revoke Kernel Access..
# 8  
Old 08-07-2007
Thanks for this !!
Well, I can find the command 'Setprivgrp' requires 2 parameters (Group ID and preiviledges). But, how can I remove the previledges for a particular thing (i.e. Kernel).
Even, I do not want to remove all the previledges for that group. I want to remove the previledges only for Kernel.
Will the 'CHOWN' command work out, any idea ?

Thanks,
Rohit..
# 9  
Old 08-07-2007
We are going back to the same question. Is the problem having anything to do with the permissions on /stand/vmunix? If the problem is with permissions on that file, then yes, the chown command will work.
# 10  
Old 08-07-2007
Re..

No.. I was asking how to set the permission for only kernel with 'setprivgrp' command.
As per I know, we need to give the file or directory name to provide previledges, but as for 'setprivgrp' command, we do not have any option to provide only for one file/dir. So, I want to know how can I revoke the previledges only for kernel, not for rest of the files or options for that particular group.
It will be helpful if you can explain the answer with an example.

Thanks,
Rohit..
# 11  
Old 08-07-2007
Since noone answered in 23 hours, I will ask : what kind of group control Kernel and what is your system ? Basically, you can alter kernel values, where applicable, only if you are root user.
# 12  
Old 08-08-2007
I'm sorry, but I can't give examples (no access to any HP systems). You can get the existing privileges that a group has using getprivgrp. Then using setprivgrp, remove the permissions that are not required.

I can't get more specific than that, sorry.
# 13  
Old 08-08-2007
Bug

Yes, I also think so.. Anyway, thanks a lot for your help.. Please let me know if you get any update regarding this.

Thanks,
Rohit..
# 14  
Old 08-08-2007
Question

The problem is one of the group ID is having kernel access. I do not know how the group is having previledges to kernel, whereas no other groups are having this kernel access ? I need to revoke the kernel access/previledges of that particular group.
The OS is HP-UX and version may be 11.0.
The root wrongly provided the kernel previledges to one of the group. I do not know how and where the root has given these previledges ? The particular group is having all the previledges to access the kernel. Now, I need to revoke the previledges for that group, which I donot know where and how to change in the system ? If you know any command for this, then please let me know in details with an example.

Thanks,
Rohit..
 
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Forum Support Area for Unregistered Users & Account Problems

User banned, requesting to revoke the ban.

My username is abhilashnair. I was banned recently for deleting my post. I wish to apologise for disregarding forum rules. I request you to revoke my ban and give me one more chance if possible, i assure you that I will abide by all rules henceforth Since this is really informative forum and rich... (3 Replies)
Discussion started by: Unregistered
3 Replies

2. UNIX for Advanced & Expert Users

Sudoers - Revoke default policy

I would like to keep my /etc/sudoers file as distributed and only use a /etc/sudoers.d drop-in file instead. Everything is working fine except for permissions given to the wheel group in the distribution sudoers file: ## Allows people in group wheel to run all commands %wheel ALL=(ALL) ... (1 Reply)
Discussion started by: Chubler_XL
1 Replies

3. Linux

Unload kernel module at boot time (Debian Wheezy 7.2, 3.2.0-4-686-pae kernel)

Hi everyone, I am trying to prevent the ehci_hcd kernel module to load at boot time. Here's what I've tried so far: 1) Add the following line to /etc/modprobe.d/blacklist.conf (as suggested here): 2) Blacklisted the module by adding the following string to 3) Tried to blacklist the module... (0 Replies)
Discussion started by: gacanepa
0 Replies

4. UNIX for Advanced & Expert Users

Precaution to access user mode buffers from kernel

When accessing a user mode buffers from kernel space drivers what precautions must we take and how those precautions need to be implemented? (0 Replies)
Discussion started by: rupeshkp728
0 Replies

5. Solaris

Which file is read by kernel to set its default system kernel parameters values?

Hi gurus Could anybody tell me which file is read by kernel to set its default system kernal parameters values in solaris. Here I am not taking about /etc/system file which is used to load kernal modules or to change any default system kernal parameter value Is it /dev/kmem file or something... (1 Reply)
Discussion started by: girish.batra
1 Replies

6. UNIX for Dummies Questions & Answers

kernel giving access for multiple users to access files

hi all, i want to know y kernel is giving access for multiple users to access a file when one user may be the owner is executing that file. Because other user can manipulate that file when the other user is executing that file, it will give the unexpected result to owner . plz help me... (1 Reply)
Discussion started by: jimmyuk
1 Replies

7. UNIX for Advanced & Expert Users

Can kernel process access user address space ?

Can kernel process access user address space ? (2 Replies)
Discussion started by: subhotech
2 Replies

8. Programming

Access process memory from kernel space

Hi, I'm currently working on a project to help the analysis of malware from inside the kernel to avoid any kind of detection. So I need to be able to read the process memory from my kernel module. As of now, I'm stuck at converting a virtual memory address (for example 0x080483e8 found... (3 Replies)
Discussion started by: anonymoose
3 Replies

9. HP-UX

How to restrict a user group to access the kernel

Hi, Please any one can help me to know that how we can restrict a user group to access the kernel at all. (0 Replies)
Discussion started by: harishankar
0 Replies

10. Programming

Aplication user and kernel mode (data access)

Hi all, I am trying to setup a program to use a device driver and am confusing buffer access between User and Kernel mode. I think all applications running in User space have to communicate with the device drivers using io control calls and then have some functions called back from the driver... (1 Reply)
Discussion started by: Brendan Kennedy
1 Replies
Login or Register to Ask a Question