Re: Question about protection of raw partition and shared libraries

Path: emory!swrinde!mips!spool.mu.edu!agate!apple!voder!pyramid!infmx!craigbr From: craigbr@informix.com (Craig Browning) Newsgroups: comp.databases.informix Message-ID: <1992Feb28.004839.17576@informix.com> Date: 28 Feb 92 00:48:39 GMT References: <1992Feb27.000349.7400@inftec.be> Sender: news@informix.com (Usenet News) Organization: Informix Software, Inc. In article <1992Feb27.000349.7400@inftec.be> mike@inftec.be (Mike Aerts) writes: > >I became the sysadmin of a system with Informix ON-LINE 4.0. >I was surprised to see that the protection of the raw partitions >for Informix are crw-rw-rw-. >They told me this was necesary to allow different users to access the >database. > >Please don't respond by RTFM, I'm still searching for them, but want to >find solutions as quick as possible. > >Mike.-- >------------------------------------------------------------------------ >E-mail : mike@inftec.BE | I think that it's extraordinarly important >tel : +32 2 460.46.11 | that we in computer science keep fun in >Fax : +32 2 460.56.50 | computing. .... A.J. Perlis The correct permissions for pathnames for OnLine chunks is 660, owner and group "informix". The person who told you public needs read and write permissions was wrong; only "informix" needs permissions, as that is how the database level permissions are enforced. Giving read and write on the device to public is a security risk, as you mentioned. Craig