RE: onstat: Shared memory: permission denied???

Ignorant people tend to be a reason for paranoia where I work. We had an employee who when asked to delete all the logs a certain application was creating tried his hardest to delete the physical and logical logs (cooked chunks) Luckily for both him and me his atttempts to get the system administrator to delete them for him failed and the database lived to run another day. Will >===== Original Message From Scott Black <sblack@elsouth.com> ===== >I've heard this for the past few years on this list, and I have yet to >find a reason why. We do it, and have NEVER had ANY problems >whatsoever. There is however a slight advantage in having a readymade >group that MIS can use. Whatever the security reasons are, they are >still there. If I were unable to do something due to not being in group >Informix, I would just su to root (or informix) and do it anyway. This >way is less typing. > >Why all the paranoia? > > -----Original Message----- >From: Obnoxio The Clown [mailto:obnoxio@hotmail.com] >Sent: Wednesday, June 07, 2000 6:23 AM >Posted To: informix >Conversation: onstat: Shared memory: permission denied??? >Subject: Re: onstat: Shared memory: permission denied??? > > >Nononononononononononononononononononononononononononononononononono!! > >From: dmoeller@geocities.com >> >>You might try adding that 'other' user to the informix group. > >Nooooooooooooooooooooooooooooooo!!! Major security violation. > >>Here's what 'ipcs' outputs on my system: >>IPC status from <running system> as of Tue Jun 6 10:38:3 >>Message Queue facility not in system. >>T ID KEY MODE OWNER GROUP >>Shared Memory: >>m 800 0x52574801 --rw-rw---- root informix >>m 801 0x52574802 --rw-rw---- root informix >>m 802 0x52574803 --rw-rw---- root informix >> >>So if a user isn't root, informix or in the informix group they won't >>have permissions to read the shared memory segments.. >> >>The groups on my solaris 2.6 are in /etc/group. >> >>Dave >> >> >>In article <960306588.533683@curry>, >> "Marc Thompson" <MarcT@bops.com> wrote: >> > Greetings, >> > >> > I'm receiving the following error message when I run onstat - as any >>user >> > other than root and informix: >> > >> > #onstat - >> > onstat: Shared memory: permission denied >> > >> > I've searched through Answers Online and found nothing. >> > >> > I am running Informix Dynamic Server.2000 on a RedHat Linux 6.2 >>system. >> > >> > Any help is appreciated, >> > Marc Thompson >> > >> > -- >> > --------------------------------------- >> > Marc Thompson >> > BOPS, Inc. >> > Austin, TX >> > >> > >> >> >>Sent via Deja.com http://www.deja.com/ >>Before you buy. > >________________________________________________________________________ >Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com ------------------------------------------------------------ This e-mail has been sent to you courtesy of OperaMail, as a free service from Opera Software, makers of the award-winning Web Browser, Opera. Visit us at http://www.opera.com/ or our portal at: http://www.myopera.com/ Your free e-mail account is waiting at: http://www.operamail.com/ ------------------------------------------------------------