mksysb Permission

[fousait]

i looking at letting my help desk run mksysb can i change the Permission on the program so it has group and every one execute with out breaking the program

 

[lillracksingen]

mksysb is as script so you can't use setuid+setgid bits on this one, but sudo would probably be of help. It's on the Linux Toolbox CD.

 

[hfaix]

lillracksingen is right. This won't work. The mksysb has to be able to get to files that "everyone" shouldn't be able to see.

I have my operators doing mksysb's with sudo.

 

[RodKnowlton]

Since mksysb can write to a file, be sure to specify exactly what arguments to use in your sudoers file. Otherwise, you're open to a nasty DOS. A line like this should do it, given a User_Alias of OPS containing your operators' user names:

OPS ALL = /usr/bin/mksysb -X -i /dev/rmt0

Rod Knowlton
IBM Certified Advanced Technical Expert pSeries and AIX 5L
CompTIA Linux+
CompTIA Security+