Forum Discussion
- MarianneLevel 6
Please give examples?
I have found that there are hardly any files/folders that have write permission for 'other', even for root. Two of the very few folders that have 777 permissions are in /usr/openv/netbackup/logs - user_ops and nbliveup. user_ops certainly needs write permission for all users.
Most binaries in netbackup/bin and volmgr/bin have 500 (-r-x------ 1 root bin) permissions, the rest (including admincmd) have 555 permissions (-r-xr-xr-x) - no write permission.
So, I certainly don't see any unusual amount of write permission for all users.
Did someone in your environment perhaps do a recursive chmod?
- dododo__Level 3
I certainly see 777 permissions in /usr/openv/netbackup/logs - user_ops and nbliveup. user_ops on my end as well. Are those files "have to" be 777?
Here are some my examples in other directories with 777. (I had confirmed that no one did chmod), they are:
opt/openv/var/global/device_mappings.txt
/opt/openv/var/vnetd/bpversion_touch.txt
/opt/openv/volmgr/bin/SHARED_DRIVE_CALLED
/opt/openv/volmgr/debug/acsssi/event.log
/opt/openv/var/global/device_mappings.txt
/opt/openv/var/nbproxy_nbsl-ServiceManagementEx-1.ior.mgr
/opt/openv/var/nbproxy_nbsl-ServiceManagementEx-10.ior.mgr
The fact is -- our media server(s) went through many upgrades. I heard NBU6.5.6 will not generate 777 files anymore. If this is a true statement, does this mean if I have a clean installation of 6.5.6 (no previous historical files or directories) on a server, I won't find any 777 files in any NBU directories?
- Will_RestoreLevel 6
/usr/openv/netbackup/db/images/*.lck
/usr/openv/netbackup/vault
/usr/openv/pack
we run a script to remove world-write permissions for hardening but some of these reverted
Related Content
- 3 years ago