------=_Part_405_9741445.1128373346838
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
It is a security issue. This is doing exactly what it is suppose to do. You
must reset the permissions after a reset.
If you were able to restore the files with all the same permissions, it
would be really easy to spoof the server. If you had access to one server
you could very easily restore to another server, and then gain full access
to that server if you did it correctly.
Message: 1
From: "AccelSup" <accelsup AT iidc.lucent DOT com>
To: <veritas-bu AT mailman.eng.auburn DOT edu>
Date: Mon, 3 Oct 2005 11:50:12 +0530
Subject: [Veritas-bu] Permission change after restore
This is a multi-part message in MIME format.
------=3D_NextPart_000_01FC _01C5C810.9CE3E4A0
Content-Type: text/plain;
charset=3D"iso-8859-1"
Content-Transfer-Encoding: quoted-printable
All,
We are using Veritas Netbackup Version 4.5 MP6. The master/media server
and all the clients are on Solaris sparc platforms. We are taking
snapshort(fssnap) of our ClearCase VOB file system and taking the
backup.
The problem is while restoring the files/folders permissions are gating
changed recursively.
Example:
Directory permissions before taking backup.
drwxr-xr-x 8 root other 512 Aug 5 12:01
ipcore_tools.vbs
Directory permissions after restoring from backup.
drwxr-sr-x 8 root other 512 Jul 1 09:01
ipcore_tools.vbs
Setgid bit is getting set recursively from the top level directory .
The command what we use for creating a snap short dev:
/usr/sbin/fssnap -F ufs -o backing-store=3D3D<source FS>,unlink =3D
<Destination FS>
There is no problem with the permission after making snapshort (using =3D
above command).
Have any one of you got this kind of problem or know the solution.
I will summarize.
Sincerely,
Raghu
lraghunath AT lucent DOT com
SDE Team
------=_Part_405_9741445.1128373346838
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
It is a security issue. This is doing exactly what it is suppose to do. You=
must reset the permissions after a reset.<br>
If you were able to restore the files with all the same permissions, it
would be really easy to spoof the server. If you had access to one
server you could very easily restore to another server, and then gain
full access to that server if you did it correctly. <br>
<br>
<br>
Message: 1<br>
From: "AccelSup" <<a onclick=3D"return top.js.OpenExtLink(wind=
ow,event,this)" href=3D"mailto:accelsup AT iidc.lucent DOT com">accelsup AT
iidc DOT luce=
nt.com</a>><br>
To: <<a onclick=3D"return top.js.OpenExtLink(window,event,this)" href=3D=
"mailto:veritas-bu AT mailman.eng.auburn DOT edu">veritas-bu AT
mailman.eng.auburn DOT ed=
u</a>><br>
Date: Mon, 3 Oct 2005 11:50:12 +0530<br>
Subject: [Veritas-bu] Permission change after restore<br>
<br>
This is a multi-part message in MIME format.<br>
<br>
------=3D_NextPart_000_01FC
<div id=3D"mb_0">_01C5C810.9CE3E4A0<br>Content-Type: text/plain;<br> =
charset=3D"iso-8859-1"<br>Content-Transfer-E=
ncoding: quoted-printable<br><br>All,<br>We are using Veritas Netbackup Ver=
sion 4.5 MP6. The master/media server=20
<br>and all the clients are on Solaris sparc platforms. We are taking <br>s=
napshort(fssnap) of our ClearCase VOB file system and taking the<br>backup.=
<br> The problem is while restoring the files/folders permissions are =
gating
<br>changed recursively.<br>Example:<br>Directory permissions before taking=
backup.<br> drwxr-xr-x 8 root other =
512 Aug 5 12:01 <br>ipcore_tools.vbs<br><br>&nb=
sp;Directory permissions after restoring from backup.
<br> drwxr-sr-x 8 root other =
512 Jul 1 09:01 <br>ipcore_tools.vbs<br><br> Setgi=
d bit is getting set recursively from the top level directory .<br><br>&nbs=
p;The command what we use for creating a snap short dev:
<br><br> /usr/sbin/fssnap -F ufs -o backing-store=3D3D<source FS>=
;,unlink =3D<br><Destination FS><br>There is no problem with the perm=
ission after making snapshort (using =3D<br>above command).<br><br> Ha=
ve any one of you got this kind of problem or know the solution.
<br>I will summarize.<br><br><br> Sincerely,<br>Raghu<br><a onclick=3D=
"return top.js.OpenExtLink(window,event,this)" href=3D"mailto:lraghunath@lu=
cent.com">lraghunath AT lucent DOT com</a><br>SDE Team<br><br></div>
<br>
------=_Part_405_9741445.1128373346838--
|
