+----[ Matt Hyclak <hyclak AT math.ohiou DOT edu> (13.Oct.2004 12:30):
|
| Why is amandad owned by operator and not amanda? I'm not sure that's making
| a big difference assuming amanda is in the operator group, but it looks like
| some permissions are a little wonky. 

I dunno. Amanda is in the operator group:

operator:*:5:root,amanda

Is there any place where permissions on files, directories,
etc are listed so I can check what a right installation
should look like?
 
| All of my files are owned by amanda:disk with the exception of amqde,
| calcsize, killpgrp, rundump and runtar. Those are owned by root and setuid.

All of my files (executables) are owned by amanda:operator, with the exception
of amqde, calcsize, amcheck, amrecover, dumper, killpgrp, planner, rundump and
runtar which are owned by root:operator and setuid'ed; and amandad,
patch-system, selfcheck, sendbackup, sendsize, versionsuffix, which are owned
by operator:operator and are not setuid.

the full list is available below.

pi# ls -l /usr/local/libexec/amanda/
total 614
-r-xr-xr-x  1 operator  operator   13972 Sep 28 12:22 amandad
-r--r--r--  1 amanda    operator     184 Sep 30 15:54 amcat.awk
-r-xr-xr-x  1 amanda    operator    7632 Sep 30 15:54 amcleanupdisk
-r-xr-xr-x  1 amanda    operator   13604 Sep 30 15:54 amidxtaped
-r-xr-xr-x  1 amanda    operator   23136 Sep 30 15:54 amindexd
-r-xr-xr-x  1 amanda    operator    6148 Sep 30 15:54 amlogroll
-r--r--r--  1 amanda    operator   17439 Sep 30 15:54 amplot.awk
-r--r--r--  1 amanda    operator    3283 Sep 30 15:54 amplot.g
-r--r--r--  1 amanda    operator    3293 Sep 30 15:54 amplot.gp
-r-sr-x---  1 root      operator    4904 Sep 28 12:22 amqde
-r-xr-xr-x  1 amanda    operator    8108 Sep 30 15:54 amtrmidx
-r-xr-xr-x  1 amanda    operator    7872 Sep 30 15:54 amtrmlog
-r-sr-x---  1 root      operator    7400 Sep 28 12:22 calcsize
-r-xr-xr-x  1 amanda    operator   11242 Sep 30 15:54 chg-chio
-r-xr-xr-x  1 amanda    operator   10058 Sep 30 15:54 chg-chs
-r-xr-xr-x  1 amanda    operator    5890 Sep 30 15:54 chg-disk
-r-xr-xr-x  1 amanda    operator    5144 Sep 30 15:54 chg-juke
-r-xr-xr-x  1 amanda    operator    6768 Sep 30 15:54 chg-manual
-r-xr-xr-x  1 amanda    operator   13090 Sep 30 15:54 chg-mcutil
-r-xr-xr-x  1 amanda    operator    5578 Sep 30 15:54 chg-mtx
-r-xr-xr-x  1 amanda    operator   11954 Sep 30 15:54 chg-multi
-r-xr-xr-x  1 amanda    operator    1704 Sep 30 15:54 chg-null
-r-xr-xr-x  1 amanda    operator    3980 Sep 30 15:54 chg-rait
-r-xr-xr-x  1 amanda    operator    6696 Sep 30 15:54 chg-rth
-r-xr-xr-x  1 amanda    operator  142372 Sep 30 15:54 chg-scsi
-r-xr-xr-x  1 amanda    operator   37272 Sep 30 15:54 chg-zd-mtx
-r-xr-xr-x  1 amanda    operator   34696 Sep 30 15:54 driver
-r-sr-x---  1 root      operator   31272 Sep 30 15:54 dumper
-r-sr-x---  1 root      operator    5544 Sep 28 12:22 killpgrp
-r-xr-xr-x  1 operator  operator    4848 Sep 28 12:22 patch-system
-r-sr-x---  1 root      operator   31200 Sep 30 15:54 planner
-r-sr-x---  1 root      operator    3772 Sep 28 12:22 rundump
-r-sr-x---  1 root      operator    4636 Sep 28 12:22 runtar
-r-xr-xr-x  1 operator  operator   13572 Sep 28 12:22 selfcheck
-r-xr-xr-x  1 operator  operator   27520 Sep 28 12:22 sendbackup
-r-xr-xr-x  1 operator  operator   24200 Sep 28 12:22 sendsize
-r-xr-xr-x  1 amanda    operator   31144 Sep 30 15:54 taper
-r-xr-xr-x  1 operator  operator    3188 Sep 28 12:22 versionsuffix

pi# ls -l /usr/local/sbin/am*
-r-xr-xr-x  1 amanda    operator  29352 Sep 30 15:54 /usr/local/sbin/amadmin
-r-sr-x---  1 root      operator  33416 Sep 30 15:54 /usr/local/sbin/amcheck
-r-xr-xr-x  1 amanda    operator   1816 Sep 30 15:54 /usr/local/sbin/amcheckdb
-r-xr-xr-x  1 amanda    operator   3941 Sep 30 15:54 /usr/local/sbin/amcleanup
-r-xr-xr-x  1 amanda    operator   6308 Sep 30 15:54 /usr/local/sbin/amdd
-r-xr-xr-x  1 amanda    operator   3749 Sep 30 15:54 /usr/local/sbin/amdump
-r-xr-xr-x  1 amanda    operator  13664 Sep 30 15:54 /usr/local/sbin/amflush
-r-xr-xr-x  1 amanda    operator   8876 Sep 30 15:54 /usr/local/sbin/amgetconf
-r-xr-xr-x  1 amanda    operator   9108 Sep 30 15:54 /usr/local/sbin/amlabel
-r-xr-xr-x  1 amanda    operator   6708 Sep 30 15:54 /usr/local/sbin/ammt
-r-xr-xr-x  1 amanda    operator   4503 Sep 30 15:54 /usr/local/sbin/amoverview
-r-xr-xr-x  1 amanda    operator   4603 Sep 30 15:54 /usr/local/sbin/amplot
-r-xr-x---  1 operator  operator  58384 Sep 28 12:22 /usr/local/sbin/amrecover
-r-xr-xr-x  1 amanda    operator  35656 Sep 30 15:54 /usr/local/sbin/amreport
-r-xr-xr-x  1 amanda    operator  13948 Sep 30 15:54 /usr/local/sbin/amrestore
-r-xr-xr-x  1 amanda    operator   6840 Sep 30 15:54 /usr/local/sbin/amrmtape
-r-xr-xr-x  1 amanda    operator  32881 Sep 30 15:54 /usr/local/sbin/amstatus
-r-xr-xr-x  1 amanda    operator  14740 Sep 30 15:54 /usr/local/sbin/amtape
-r-xr-xr-x  1 amanda    operator   9540 Sep 30 15:54 /usr/local/sbin/amtapetype
-r-xr-xr-x  1 amanda    operator   6889 Sep 30 15:54 /usr/local/sbin/amtoc
-r-xr-xr-x  1 amanda    operator  11740 Sep 30 15:54 /usr/local/sbin/amverify
-r-xr-xr-x  1 amanda    operator   1123 Sep 30 15:54 /usr/local/sbin/amverifyrun

| So, make sure amanda is in the right group and double check the permissions...
| 
| Matt
|
+----]

This is what I'm trying to do ... but i'm getting confused as to what is the
right set of privileges for the right set of executables and directories.

Except for the indications in the INSTALL file, all of the permissions have 
been set at installation (by the corresponding Makefile). Attached is the 
output collected during installation.

Fernan


-- 
Fernan Aguero -  fernan at iib.unsam.edu.ar
Phone: +54 11 4580-7255/7 ext 310, Fax: +54 11 4752-9639
Check http://genoma.unsam.edu.ar/~fernan for more info.