From: Jorge Carrizo (jorge_carrizo@yahoo.com)
Date: Fri Oct 17 2003 - 17:25:02 EDT
Hi managers :
I recently had an incident involving file permissions
change on a block device of a Veritas Volume under VM
3.1.1
The mentioned block device (in fact three Oracle raw
devices) had their owner/group reset to the default
user "root".
Incidentally CA TNG was installed just days ago, which
seems to have some how enable auditing
lastcomm | tail
ckpacct adm __ 0.02 secs Fri Oct
17 17:58
rm adm __ 0.00 secs Fri Oct
17 17:58
turnacct adm __ 0.05 secs Fri Oct
17 17:58
accton S root __ 0.00 secs Fri Oct
17 17:58
root/Host1 > file /var/adm/pa*
/var/adm/pacct: data
/var/adm/pacct1: data
/var/adm/pacct10: data
/var/adm/pacct11: data
/var/adm/pacct12: data
/var/adm/pacct13: data
/var/adm/pacct14: data
/var/adm/pacct15: data
/var/adm/pacct16: data
/var/adm/pacct17: data
/var/adm/pacct18: data
/var/adm/pacct19: data
/var/adm/pacct2: data
/var/adm/pacct3: data
/var/adm/pacct4: data
/var/adm/pacct5: data
/var/adm/pacct6: data
/var/adm/pacct7: data
/var/adm/pacct8: data
/var/adm/pacct9: data
Anyone aware of how to check file permissions changes
in time ?
Anyone aware of a similar problem
PKGINST: VRTSvxvm
NAME: VERITAS Volume Manager, Binaries
CATEGORY: system
ARCH: sparc
VERSION: 3.1.1,REV=01.30.2001.22.21
PKGINST: VRTSvmsa
NAME: VERITAS Volume Manager Storage
Administrator
CATEGORY: system
ARCH: sparc
VERSION: 3.1.1,REV=02.10.2001.07.42
Tks in advance
------------
Internet GRATIS es Yahoo! Conexisn
4004-1010 desde Buenos Aires. Usuario: yahoo; contraseqa: yahoo
Mas ciudades: http://conexion.yahoo.com.ar
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:27:19 EDT