金融其它
救命贴 /etc目录权限被更改为640
早上发现普通用户都无法登陆系统,但ROOT用户能登陆;
后检查发现,/etc目录 权限由755 被改成了 640
之前只做过以下动作:
1因HACMP报verify问题，故用root查看hacmp clverify.log ;
2用root 做了snap -ec,并用ROOT通过WINCOMMAND(FTP工具)把snap包拿下来
请问有何可能会更改/etc的权限.
是否只有chmod才能修改权限?
如何能查看权限变更情况。
如何排查谁更改的权限。
救命啊！！否则就被当误操作处理了！！！
后检查发现,/etc目录 权限由755 被改成了 640
之前只做过以下动作:
1因HACMP报verify问题，故用root查看hacmp clverify.log ;
2用root 做了snap -ec,并用ROOT通过WINCOMMAND(FTP工具)把snap包拿下来
请问有何可能会更改/etc的权限.
是否只有chmod才能修改权限?
如何能查看权限变更情况。
如何排查谁更改的权限。
救命啊！！否则就被当误操作处理了！！！
90同行回答
没办法啊，现在都被查封了收起
你把文件系统分布,HACMP资源组及HACMP日志发出来 -----相关日志目前还没办法公开，感谢。我现在发现snap -ec 在主节点上的PAX。Z有问题，备节点能打开。主节点打不开 ...fyuansheng 发表于 2009-11-26 13:16
不公开,大家怎么帮你分析.晕........................看到什么收起
我查了HACMP的红皮书，里面有以下分析：
The HACMP Configuration Database
(ODM) classes have been updated so that they are owned by the root user
and the hacmp group.
– The permissions of 640 are set for most HACMP object classes. The
HACMPdisksubsystem is an exception with 600.
----------------------------------
Additional cluster security features
The HACMP ODM files are stored in the /etc/es/objrepos directory. In order to
improve security their owner is root and group ID is hacmp. Their permission is 0640, except HACMPdisksubsystem which is 0600. All cluster utilities intended
for public use have hacmp setgid turned on so they can read the HACMP ODM
files.The hacmp group is created during HACMP installation, if it’s not already
there.收起
The HACMP Configuration Database
(ODM) classes have been updated so that they are owned by the root user
and the hacmp group.
– The permissions of 640 are set for most HACMP object classes. The
HACMPdisksubsystem is an exception with 600.
----------------------------------
Additional cluster security features
The HACMP ODM files are stored in the /etc/es/objrepos directory. In order to
improve security their owner is root and group ID is hacmp. Their permission is 0640, except HACMPdisksubsystem which is 0600. All cluster utilities intended
for public use have hacmp setgid turned on so they can read the HACMP ODM
files.The hacmp group is created during HACMP installation, if it’s not already
there.收起