Disabling Security Checking

Home | Previous Page | Next Page The Database Server > Security > Server Utility Security Before Starting on UNIX and Linux >

Disabling Security Checking

Although it is strongly recommended that you never disable security checking, you can partially disable the security checking for a database server residing in a specific $INFORMIXDIR directory. To disable security checking, as the user root, run the INFORMIXDIR/etc/informixdir-is-insecure script. After this script runs successfully, the warning messages still appear when the utilities are run, but the programs continue.

Note:

You can specify the value of INFORMIXDIR on the command line as an argument to the script. Thus, you do not need to set INFORMIXDIR in the root user environment.

The informixdir-is-insecure script creates a /etc/informix directory (if necessary) that is owned by root and has 555 permissions. In this directory, the script creates a file named server-10.xx.yyy that has 444 permissions. The xx portion of the filename is the major version number and yyy portion is the fixpack number: for example, server-10.00.UC1. This file lists the $INFORMIXDIR values for which security checking is disabled.

Note:

The format of the contents of the server-10.xx.yyy files might change in future releases.

If you choose to disable the security checking even though it is recommended that you never do so, you should use the ibmifmx_security.sh script to limit the number of SUID and SGID programs on your system.