oninit permissions
I have informix 9.4FC3. All of the sudden I am getting: ONCONFIG /usr/online9.40.FC3/etc/onconfig.dev has insecure mode 777 I checked, and $INFORMIXDIR/bin/oninit has the recommended permissions. It is: -rwsr-sr-- 1 root informix 18107177 Apr 12 2004 /usr/online9.40.FC3/bin/oninit Anybody know why ? Thanks, floyd
--0__=0ABBE525DFC293278f9e8a93df938690918c0ABBE525DFC29327
Content-type: multipart/alternative;
Boundary="1__=0ABBE525DFC293278f9e8a93df938690918c0ABBE525DFC29327"
--1__=0ABBE525DFC293278f9e8a93df938690918c0ABBE525DFC29327
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: quoted-printable
Change it to
IDS2000files:etc/onconfig.std informix informix 644
644 and informix for Group and owner.
Thank you,
Kannan Thirugnanam
=
"Floyd Welle...." =
<fwellers@yahoo.c =
om>@SMTP@Exchange =
To
Sent by: ids@iiug.org@SMTP@Exchange =
forum.subscriber@ =
cc
iiug.org =
Subj=
ect
oninit permissions [4360] =
02/28/2005 09:22 =
AM =
=
=
=
=
I have informix 9.4FC3.
All of the sudden I am getting:
ONCONFIG /usr/online9.40.FC3/etc/onconfig.dev has insecure mode 777
I checked, and $INFORMIXDIR/bin/oninit has the recommended permissions.=
It
is:
-rwsr-sr-- 1 root informix 18107177 Apr 12 2004
/usr/online9.40.FC3/bin/oninit
Anybody know why ?
Thanks,
floyd
=
--1__=0ABBE525DFC293278f9e8a93df938690918c0ABBE525DFC29327
Content-type: text/html; charset=US-ASCII
Content-Disposition: inline
Content-transfer-encoding: quoted-printable
<html><body>
<p>Change it to <br>
IDS2000files:etc/onconfig.std informix informix 644 <br>=
<br>
644 and informix for Group and owner. <br>
<tt><font size=3D"4"><br>
<br>
Thank you,<br>
Kannan Thirugnanam<br>
</font></tt><tt><font size=3D"4"><br>
</font></tt><br>
<img src=3D"cid:10__=3D0ABBE525DFC293278f9e8a93df93869@JTax.com" width=3D=
"16" height=3D"16" alt=3D"Inactive hide details for "Floyd Welle..=
.." <fwellers@yahoo.com>@SMTP@Exchange">"Floyd Welle...=
." <fwellers@yahoo.com>@SMTP@Exchange<br>
<br>
<br>
<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=
<tr valign=3D"top"><td style=3D"background-image:url(cid:20__=3D0ABBE52=
5DFC293278f9e8a93df93869@JTax.com); background-repeat: no-repeat; " wid=
th=3D"40%">
<ul>
<ul>
<ul>
<ul><b><font size=3D"2">"Floyd Welle...." <fwellers@yahoo.=
com>@SMTP@Exchange</font></b><font size=3D"2"> </font><br>
<font size=3D"2">Sent by: forum.subscriber@iiug.org</font>
<p><font size=3D"2">02/28/2005 09:22 AM</font></ul>
</ul>
</ul>
</ul>
</td><td width=3D"60%">
<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=
<tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:3=
0__=3D0ABBE525DFC293278f9e8a93df93869@JTax.com" border=3D"0" height=3D"=
1" width=3D"58" alt=3D""><br>
<div align=3D"right"><font size=3D"2">To</font></div></td><td width=3D"=
100%"><img src=3D"cid:30__=3D0ABBE525DFC293278f9e8a93df93869@JTax.com" =
border=3D"0" height=3D"1" width=3D"1" alt=3D""><br>
<font size=3D"2">ids@iiug.org@SMTP@Exchange</font></td></tr>
<tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:3=
0__=3D0ABBE525DFC293278f9e8a93df93869@JTax.com" border=3D"0" height=3D"=
1" width=3D"58" alt=3D""><br>
<div align=3D"right"><font size=3D"2">cc</font></div></td><td width=3D"=
100%"><img src=3D"cid:30__=3D0ABBE525DFC293278f9e8a93df93869@JTax.com" =
border=3D"0" height=3D"1" width=3D"1" alt=3D""><br>
</td></tr>
<tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:3=
0__=3D0ABBE525DFC293278f9e8a93df93869@JTax.com" border=3D"0" height=3D"=
1" width=3D"58" alt=3D""><br>
<div align=3D"right"><font size=3D"2">Subject</font></div></td><td widt=
h=3D"100%"><img src=3D"cid:30__=3D0ABBE525DFC293278f9e8a93df93869@JTax.=
com" border=3D"0" height=3D"1" width=3D"1" alt=3D""><br>
<font size=3D"2">oninit permissions [4360] </font></td></tr>
</table>
<table border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
<tr valign=3D"top"><td width=3D"58"><img src=3D"cid:30__=3D0ABBE525DFC2=
93278f9e8a93df93869@JTax.com" border=3D"0" height=3D"1" width=3D"1" alt=
=3D""></td><td width=3D"336"><img src=3D"cid:30__=3D0ABBE525DFC293278f9=
e8a93df93869@JTax.com" border=3D"0" height=3D"1" width=3D"1" alt=3D""><=
/td></tr>
</table>
</td></tr>
</table>
<font face=3D"Arial">I have informix 9.4FC3.</font><br>
<font face=3D"Arial">All of the sudden I am getting:</font><br>
<font face=3D"Arial">ONCONFIG /usr/online9.40.FC3/etc/onconfig.dev has =
insecure mode 777</font><br>
<font face=3D"Arial"> </font><br>
<font face=3D"Arial">I checked, and $INFORMIXDIR/bin/oninit has the rec=
ommended permissions. It is:</font><br>
<font face=3D"Arial">-rwsr-sr-- 1 root informix 18107177 Apr 12=
2004 /usr/online9.40.FC3/bin/oninit</font><br>
<font face=3D"Arial"> </font><br>
<font face=3D"Arial">Anybody know why ?</font><br>
<font face=3D"Arial"> </font><br>
<font face=3D"Arial">Thanks,</font><br>
<font face=3D"Arial">floyd</font><br>
<font face=3D"Arial"> </font><br>
<font face=3D"Arial"> </font><br>
<br>
<br>
</body></html>=
--1__=0ABBE525DFC293278f9e8a93df938690918c0ABBE525DFC29327--
--0__=0ABBE525DFC293278f9e8a93df938690918c0ABBE525DFC29327
Content-type: image/gif;
name="graycol.gif"
Content-Disposition: inline; filename="graycol.gif"
Content-ID: <10__=0ABBE525DFC293278f9e8a93df93869@JTax.com>
Content-transfer-encoding: base64
R0lGODlhEAAQAKECAMzMzAAAAP///wAAACH5BAEAAAIALAAAAAAQABAAAAIXlI+py+0PopwxUbpu
ZRfKZ2zgSJbmSRYAIf4fT3B0aW1pemVkIGJ5IFVsZWFkIFNtYXJ0U2F2ZXIhAAA7
--0__=0ABBE525DFC293278f9e8a93df938690918c0ABBE525DFC29327
Content-type: image/gif;
name="ecblank.gif"
Content-Disposition: inline; filename="ecblank.gif"
Content-ID: <30__=0ABBE525DFC293278f9e8a93df93869@JTax.com>
Content-transfer-encoding: base64
R0lGODlhEAABAIAAAAAAAP///yH5BAEAAAEALAAAAAAQAAEAAAIEjI8ZBQA7
--0__=0ABBE525DFC293278f9e8a93df938690918c0ABBE525DFC29327--
forum.subscriber@iiug.org wrote on 02/28/2005 06:22:43 AM: > I have informix 9.4FC3. > All of the sudden I am getting: > ONCONFIG /usr/online9.40.FC3/etc/onconfig.dev has insecure mode 777 > > I checked, and $INFORMIXDIR/bin/oninit has the recommended permissions. It is: > -rwsr-sr-- 1 root informix 18107177 Apr 12 2004 > /usr/online9.40.FC3/bin/oninit > > Anybody know why ? How do we make the error message clearer? The file with the incorrect permissions is your $ONCONFIG file - /usr/online9.40.FC3/etc/onconfig.dev - and it has 777 permissions. The ONCONFIG file should never be executable - and should not be publicly writable. In fact, for all practical purposes, all files under $INFORMIXDIR should not be publicly writable. Think about it. If any unprivileged user can modify your ONCONFIG file, then they can redirect your server so that when you next reboot it, it accesses wholly different data from what you're expecting, etc. Not good! -- Jonathan Leffler (jleffler@us.ibm.com) STSM, Informix Database Engineering, IBM Information Management Division 4100 Bohannon Drive, Menlo Park, CA 94025 Tel: +1 650-926-6921 Tie-Line: 630-6921 "I don't suffer from insanity; I enjoy every minute of it!"
Must have missed the original note. Look at iiug.org
for a script called
check_files or somesuch. It checks your permisisons and prints out the
differences.
j.
----- Original Message -----
From: "Jonathan Le...." <jleffler@us.ibm.com>
To: <ids@iiug.org>
Sent: Wednesday, March 02, 2005 12:00 PM
Subject: Re: oninit permissions [4386]
> forum.subscriber@iiug.org wrote on 02/28/2005 06:22:43 AM:
> > I have informix 9.4FC3.
> > All of the sudden I am getting:
> > ONCONFIG /usr/online9.40.FC3/etc/onconfig.dev has insecure mode 777
> >
> > I checked, and $INFORMIXDIR/bin/oninit has the recommended permissions.
> It is:
> > -rwsr-sr-- 1 root informix 18107177 Apr 12 2004
> > /usr/online9.40.FC3/bin/oninit
> >
> > Anybody know why ?
>
> How do we make the error message clearer?
>
> The file with the incorrect permissions is your $ONCONFIG file -
> /usr/online9.40.FC3/etc/onconfig.dev - and it has 777 permissions.
>
> The ONCONFIG file should never be executable - and should not be publicly
> writable.
> In fact, for all practical purposes, all files under $INFORMIXDIR should
> not be publicly writable.
>
> Think about it. If any unprivileged user can modify your ONCONFIG file,
> then they can redirect your server so that when you next reboot it, it
> accesses wholly different data from what you're expecting, etc.
>
> Not good!
>
> --
> Jonathan Leffler (jleffler@us.ibm.com)
> STSM, Informix Database Engineering, IBM Information Management Division
> 4100 Bohannon Drive, Menlo Park, CA 94025
> Tel: +1 650-926-6921 Tie-Line: 630-6921
> "I don't suffer from insanity; I enjoy every minute of it!"
>
>
>
>
>
>