Solved

which permission to backup the system

Posted on 2004-05-01
9
289 Views
Last Modified: 2013-12-27
Hi Gurus,
How to give a user a permission to backup & restore all the filesystems including root file system with ufsdump without give him all root privilleges?
Thanks
0
Comment
Question by:husamzm
9 Comments
 
LVL 20

Accepted Solution

by:
tfewster earned 125 total points
ID: 10966496
Installing sudo from http://www.sunfreeware.com/   (Documentation at http://www.sudo.ws/sudo/readme.html ) would allow you to grant a user root permissions for running the ufsdump command;  I'm not sure if Solaris has any other built in facility to give Operator type access to certain users.
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 10966645
either sudo, or a program (not script!) owned by root and UID bit set
0
 

Author Comment

by:husamzm
ID: 10970102
I don't preffer to use 3rd party, the system under support and in production,
How can you impliment the UID bit set ?
Thanks
0
Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 20

Expert Comment

by:tfewster
ID: 10970166
The problem with writing your own utility is that you may create security loopholes; It would be worth talking to your support company to see if they will give you permission to install sudo; sudo is a well known and trusted utility that will not create any support problems.

sunfreeware is a well known & trusted site for binaries, although checking and compiling the sources yourself is always preferable - and if you do that, it's as good as software you've written yourself ;-)
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 10977595
> How can you impliment the UID bit set ?
do you mean for scripts?
You cannot, if the OS does not allow it, for obvious reason.
0
 

Expert Comment

by:rkotara
ID: 11001814
The short answer to your question:
How can you impliment the UID bit set ?
is to use the chmod util to modify the script permissions.  The file should be owned by root.
"chmod 4755 filename" where filename is the name of your script.

This sets the permissions so that root can edit, group and anyone can execute.  If you want just a certain group to be able to run it, do:
"chmod 4750 filename" and make sure that persons group is assigned to file so they can execute.

If you need to remove the SUID setting, just do "chmod 0750" or whatever to remove the SUID bit.

I do remember having some problems with the environment of SUID scripts and think there was a switch to include for KSH on the first line.  It might be "#!/bin/ksh -p" I think (without the quotes, of course).

Hope this helps some.
0
 

Expert Comment

by:s0larisw1z
ID: 11093746
No need to go the evil route of SUID scripts. All that is needed is for
the user to be in the group that owns the raw device (typically sys).
As ufsdump reads raw devices, rather than files, no permissions issues.

Also, ufsdump should be run on a 'quiet' filesystem, preferably
in single-user mode. Most installations require root password
for single-user anyway.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

When you do backups in the Solaris Operating System, the file system must be inactive. Otherwise, the output may be inconsistent. A file system is inactive when it's unmounted or it's write-locked by the operating system. Although the fssnap utility…
Introduction Regular patching is part of a system administrator's tasks. However, many patches require that the system be in single-user mode before they can be installed. A cluster patch in particular can take quite a while to apply if the machine…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now