Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

which permission to backup the system

Posted on 2004-05-01
9
Medium Priority
?
329 Views
Last Modified: 2013-12-27
Hi Gurus,
How to give a user a permission to backup & restore all the filesystems including root file system with ufsdump without give him all root privilleges?
Thanks
0
Comment
Question by:husamzm
9 Comments
 
LVL 21

Accepted Solution

by:
tfewster earned 500 total points
ID: 10966496
Installing sudo from http://www.sunfreeware.com/   (Documentation at http://www.sudo.ws/sudo/readme.html ) would allow you to grant a user root permissions for running the ufsdump command;  I'm not sure if Solaris has any other built in facility to give Operator type access to certain users.
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 10966645
either sudo, or a program (not script!) owned by root and UID bit set
0
 

Author Comment

by:husamzm
ID: 10970102
I don't preffer to use 3rd party, the system under support and in production,
How can you impliment the UID bit set ?
Thanks
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 21

Expert Comment

by:tfewster
ID: 10970166
The problem with writing your own utility is that you may create security loopholes; It would be worth talking to your support company to see if they will give you permission to install sudo; sudo is a well known and trusted utility that will not create any support problems.

sunfreeware is a well known & trusted site for binaries, although checking and compiling the sources yourself is always preferable - and if you do that, it's as good as software you've written yourself ;-)
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 10977595
> How can you impliment the UID bit set ?
do you mean for scripts?
You cannot, if the OS does not allow it, for obvious reason.
0
 

Expert Comment

by:rkotara
ID: 11001814
The short answer to your question:
How can you impliment the UID bit set ?
is to use the chmod util to modify the script permissions.  The file should be owned by root.
"chmod 4755 filename" where filename is the name of your script.

This sets the permissions so that root can edit, group and anyone can execute.  If you want just a certain group to be able to run it, do:
"chmod 4750 filename" and make sure that persons group is assigned to file so they can execute.

If you need to remove the SUID setting, just do "chmod 0750" or whatever to remove the SUID bit.

I do remember having some problems with the environment of SUID scripts and think there was a switch to include for KSH on the first line.  It might be "#!/bin/ksh -p" I think (without the quotes, of course).

Hope this helps some.
0
 

Expert Comment

by:s0larisw1z
ID: 11093746
No need to go the evil route of SUID scripts. All that is needed is for
the user to be in the group that owns the raw device (typically sys).
As ufsdump reads raw devices, rather than files, no permissions issues.

Also, ufsdump should be run on a 'quiet' filesystem, preferably
in single-user mode. Most installations require root password
for single-user anyway.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This tech tip describes how to install the Solaris Operating System from a tape backup that was created using the Solaris flash archive utility. I have used this procedure on the Solaris 8 and 9 OS, and it shoudl also work well on the Solaris 10 rel…
Why Shell Scripting? Shell scripting is a powerful method of accessing UNIX systems and it is very flexible. Shell scripts are required when we want to execute a sequence of commands in Unix flavored operating systems. “Shell” is the command line i…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.
Suggested Courses

971 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question