Andy,
Thanks for the confirmation that we can remove global write.
On Wed, Aug 15, 2018 at 7:27 AM Andrew Raibeck wrote:
> @Zoltan, set the files with chmod 664 (-rw-rw-r--).
>
> @Tandon, if that is not working for Netezza, you should contact Netezza
> support about that. Full permissions does not sound right to me.
>
> Regards,
>
> Andy
>
>
>
>
> Andrew Raibeck | IBM Spectrum Protect Level 3 | stor...@us.ibm.com
>
> IBM Tivoli Storage Manager links:
> Product support:
>
> https://www.ibm.com/support/entry/portal/product/tivoli/tivoli_storage_manager
>
> Online documentation:
>
> http://www.ibm.com/support/knowledgecenter/SSGSG7/landing/welcome_ssgsg7.html
>
> Product Wiki:
>
> https://www.ibm.com/developerworks/community/wikis/home/wiki/Tivoli%20Storage%20Manager
>
> "ADSM: Dist Stor Manager" wrote on 2018-08-14
> 20:13:56:
>
> > From: Tandon Kadambala
> > To: ADSM-L@VM.MARIST.EDU
> > Date: 2018-08-14 20:16
> > Subject: Re: 8.1.2+ Linux client and file rights in /etc/adsm
> > Sent by: "ADSM: Dist Stor Manager"
> >
> > Hi,
> >
> > We have give chmod 777 TSM* and spcli*
> >
> > We checked netzza db backups all working fine.
> >
> > Without full permissions it won't work
> >
> > Thanks and regards,
> > Tandon K
> > TSM Administrator,
> > IBM India Pvt LTD.,
> >
> >
> > On Wed, Aug 15, 2018, 12:58 AM Zoltan Forray wrote:
> >
> > > Can someone point me to a document that lists the minimum file rights
> > > required for files in /etc/adsm?
> > >
> > > Our security/scanning process is barking about file in /etc/adsm having
> > > world/global rights and we need to either justify or remove those
> rights:
> > >
> > > /etc/adsm]
> > > -rw-rw-rw-. 1 root root80 Sep 13 2017 spclicert.crl
> > > -rw-rw-rw-. 1 root root 10080 Sep 18 2017 spclicert.kdb
> > > -rw-rw-rw-. 1 root root80 Sep 13 2017 spclicert.rdb
> > > -rw---. 1 root root 193 Sep 13 2017 spclicert.sth
> > > -rw-rw-rw-. 1 root root 1290 Jun 15 19:05 TSM.IDX
> > > -rw-rw-rw-. 1 root root 6319 Jun 15 19:05 TSM.KDB
> > > -rw---. 1 root root 193 Sep 13 2017 TSM.sth
> > >
> > > --
> > > *Zoltan Forray*
> > > Spectrum Protect (p.k.a. TSM) Software & Hardware Administrator
> > > Xymon Monitor Administrator
> > > VMware Administrator
> > > Virginia Commonwealth University
> > > UCC/Office of Technology Services
> > > www.ucc.vcu.edu
> > > zfor...@vcu.edu - 804-828-4807
> > > Don't be a phishing victim - VCU and other reputable organizations will
> > > never use email to request that you reply with your password, social
> > > security number or confidential personal information. For more details
> > > visit INVALID URI REMOVED
> > u=http-3A__phishing.vcu.edu_=DwIBaQ=jf_iaSHvJObTbx-
> >
>
> siA1ZOg=Ij6DLy1l7wDpCbTfcDkLC_KknvhyGdCy_RnAGnhV37I=4lGIl0DL_WDWrNOSA_GwiuHuTHt9GekFlm6mfMiH-
>
> > pg=bVn4fQViO6UoLJnZlE9OkAshwADIEfzXMHvlOclYXy8=
> > >
> >
>
--
*Zoltan Forray*
Spectrum Protect (p.k.a. TSM) Software & Hardware Administrator
Xymon Monitor Administrator
VMware Administrator
Virginia Commonwealth University
UCC/Office of Technology Services
www.ucc.vcu.edu
zfor...@vcu.edu - 804-828-4807
Don't be a phishing victim - VCU and other reputable organizations will
never use email to request that you reply with your password, social
security number or confidential personal information. For more details
visit http://phishing.vcu.edu/
