免费注册 查看新帖 |

Chinaunix

  平台 论坛 博客 文库
12下一页
最近访问板块 发新帖
查看: 5052 | 回复: 10
打印 上一主题 下一主题

setuid execution not allowed [复制链接]

论坛徽章:
0
跳转到指定楼层
1 [收藏(0)] [报告]
发表于 2006-08-17 17:41 |只看该作者 |倒序浏览
我用dmesg看到的一条记录:

Aug 17 16:26:50 ats genunix: [ID 809163 kern.info] NOTICE: oracle, uid 903: setuid execution not allowed, dev=11400004650


这个是什么原因?如何避免?
环境:
Solaris8
oracle9.2.0.7

论坛徽章:
0
2 [报告]
发表于 2006-08-18 14:23 |只看该作者
没人碰到过这个问题吗?

论坛徽章:
0
3 [报告]
发表于 2006-08-18 16:25 |只看该作者
If the directory is mounted with NOSUID, then have the system administrator remount the file system with suid enabled.

论坛徽章:
0
4 [报告]
发表于 2006-08-18 17:08 |只看该作者
哪个目录?大侠?

论坛徽章:
0
5 [报告]
发表于 2006-08-18 17:13 |只看该作者
另外,如何:mount the file system with suid enabled?

论坛徽章:
0
6 [报告]
发表于 2006-08-22 18:12 |只看该作者
请大家帮忙,谢谢。

论坛徽章:
0
7 [报告]
发表于 2006-08-23 15:01 |只看该作者
man mount
man vfstab

论坛徽章:
0
8 [报告]
发表于 2006-08-24 23:16 |只看该作者
我man了,但没看到任何有关suid的内容啊,请继续帮忙:
TTT:[200] man mount

Maintenance Commands                                    mount(1M)

NAME
     mount, umount - mount or unmount  file  systems  and  remote
     resources

SYNOPSIS
     mount [ -p | -v ]

     mount   [   -F FSType   ]    [    generic_options    ]     [
     -o specific_options ]  [ -O ]  special | mount_point

     mount   [   -F FSType   ]    [    generic_options    ]     [
     -o specific_options ]  [ -O ]  special  mount_point

     mount -a  [ -F FSType ]  [ -V  ]   [  current_options  ]   [
     -o specific_options ]  [ mount_point ... ]

     umount [ -f ]  [ -V ]  [ -o specific_options  ]   special  |
     mount_point

     umount -a  [ -f ]   [  -V  ]   [  -o specific_options  ]   [
     mount_point ... ]

DESCRIPTION
     mount attaches a file system to the file system hierarchy at
     the   mount_point,  which is the pathname of a directory. If
     mount_point has any contents prior to the  mount  operation,
     these are hidden until the file system is unmounted.

     umount unmounts a currently mounted file system,  which  may
     be  specified  either  as a  mount_point or as  special, the
     device on which the file system resides.

     The table of currently mounted file systems can be found  by
     examining  the mounted file system information file. This is
     provided by  a  file  system  that  is  usually  mounted  on
     /etc/mnttab.   The   mounted   file  system  information  is
     described in mnttab(4). Mounting a file system adds an entry
     to  the  mount  table;   a  umount removes an entry from the
     table.

     When invoked with both the  special and   mount_point  argu-
     ments  and  the  -F  option,   mount validates all arguments
     except for special  and  invokes  the  appropriate   FSType-
     specific mount module.  If invoked with no arguments,  mount
     lists all the mounted file systems  recorded  in  the  mount
     table,  /etc/mnttab. If invoked with a partial argument list
     (with only one of   special or  mount_point,  or  with  both
     special  or   mount_point  specified but not  FSType), mount
     will search  /etc/vfstab for an entry that will  supply  the
     missing  arguments.  If  no  entry is found, and the special
     argument starts with "/",  the  default  local  file  system
     type  specified  in  /etc/default/fs will be used. Otherwise

SunOS 5.8           Last change: 17 Aug 1999                    1

Maintenance Commands                                    mount(1M)

     the default remote  file  system  type  will  be  used.  The
     default  remote  file system type is determined by the first
     entry in the   /etc/dfs/fstypes  file.    After  filling  in
     missing  arguments,  mount  will invoke the  FSType-specific
     mount module.

     Only a super-user can mount or unmount  file  systems  using
     mount  and   umount. However, any user can use mount to list
     mounted file systems and resources.

OPTIONS
     -F FSType
           Used to specify the  FSType on which to operate.   The
           FSType  must be specified or must be determinable from
           /etc/vfstab,  or  by  consulting  /etc/default/fs   or
           /etc/dfs/fstypes.

     -a [ mount_points. . . ]
           Perform mount or umount operations in  parallel,  when
           possible.

           If mount points are not specified,  mount  will  mount
           all  file  systems  whose  /etc/vfstab "mount at boot"
           field is "yes". If mount points  are  specified,  then
           /etc/vfstab "mount at boot" field will be ignored.

           If mount points are specified, umount will only umount
           those  mount points. If none is specified, then umount
           will  attempt  to  unmount   all   file   systems   in
           /etc/mnttab,  with  the  exception  of  certain system
           required  file  systems:  /,  /usr,  /var,   /var/adm,
           /var/run, /proc, /dev/fd and /tmp.

     -f    Forcibly unmount a file system.

           Without this option, umount does not allow a file sys-
           tem  to  be  unmounted if a file on the file system is
           busy. Using this option can cause data loss  for  open
           files; programs which access files after the file sys-
           tem has been unmounted will get an error (EIO).

     -p    Print  the  list  of  mounted  file  systems  in   the
           /etc/vfstab format. Must be the only option specified.

     -v    Print the list of mounted file systems in verbose for-
           mat.  Must be the only option specified.

     -V    Echo the complete command line, but do not execute the
           command.  umount generates a command line by using the
           options and arguments provided by the user and  adding
           to  them  information derived from  /etc/mnttab.  This
           option should be  used  to  verify  and  validate  the

SunOS 5.8           Last change: 17 Aug 1999                    2

Maintenance Commands                                    mount(1M)

           command line.

     generic_options
           Options that are commonly supported by  most   FSType-
           specific  command  modules.  The following options are
           available:

           -m    Mount the file system without making an entry in
                 /etc/mnttab.

           -g    Globally mount the file system. On  a  clustered
                 system,  this globally mounts the file system on
                 all nodes of the  cluster.  On  a  non-clustered
                 system this has no effect.

           -o    Specify   FSType-specific  options  in  a  comma
                 separated  (without  spaces)  list of suboptions
                 and keyword-attribute pairs  for  interpretation
                 by  the   FSType-specific module of the command.
                 (See mount_ufs(1M))

           -O    Overlay mount.  Allow  the  file  system  to  be
                 mounted  over  an  existing mount  point, making
                 the underlying file system inaccessible.   If  a
                 mount is attempted on a pre-existing mount point
                 without setting this flag, the mount will  fail,
                 producing the error "device busy".

           -r    Mount the file system read-only.

USAGE
     See largefile(5) for the  description  of  the  behavior  of
     mount  and  umount  when  encountering files greater than or
     equal to 2 Gbyte ( 2**31 bytes).

FILES
     /etc/mnttab
           mount table

     /etc/default/fs
           default local file system type. Default values can  be
           set  for  the  following flags in /etc/default/fs. For
           example: LOCAL=ufs

           LOCAL:
                 The default partition for a command if no FSType
                 is specified.

     /etc/vfstab
           list of default parameters for each file system.

SunOS 5.8           Last change: 17 Aug 1999                    3

Maintenance Commands                                    mount(1M)

ATTRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:

     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Availability                | SUNWcsu                     |
    |_____________________________|_____________________________|

SEE ALSO
     mount_cachefs(1M),      mount_hsfs(1M),       mount_nfs(1M),
     mount_pcfs(1M),        mount_tmpfs(1M),       mount_ufs(1M),
     mountall(1M), umountall(1M),  mnttab(4),  vfstab(4),  attri-
     butes( 5), largefile(5), lofs(7FS), pcfs(7FS)

NOTES
     If the directory on which a file system is to be mounted  is
     a symbolic link, the file system is mounted on the directory
     to which the symbolic link refers, rather than on top of the
     symbolic link itself.

SunOS 5.8           Last change: 17 Aug 1999                    4

TTT:[202] man vfstab

File Formats                                            vfstab(4)

NAME
     vfstab - table of file system defaults

DESCRIPTION
     The file /etc/vfstab describes defaults for each  file  sys-
     tem. The information is stored in a table with the following
     column headings:

     device       device       mount      FS      fsck    mount      mount
     to mount     to fsck      point      type    pass    at boot    options

     The fields in the table are  space-separated  and  show  the
     resource  name  (device  to  mount), the raw device to  fsck
     (device to fsck), the default mount directory (mount point),
     the  name of the file system type (FS type), the number used
     by  fsck to decide whether to check the file system automat-
     ically  (fsck  pass),  whether  the  file  system  should be
     mounted automatically by  mountall (mount at boot), and  the
     file  system  mount options (mount options). (See respective
     mount file system man page below in   SEE  ALSO  for   mount
     options.)  A  '-'  is  used to indicate no entry in a field.
     This may be used when a field does not apply to the resource
     being mounted.

     The getvfsent(3C) family of routines is  used  to  read  and
     write to /etc/vfstab.

     /etc/vfstab may be used to specify swap areas. An  entry  so
     specified,  (which can be a file or a device), will automat-
     ically be added as a swap area by the  /sbin/swapadd  script
     when  the system boots. To specify a swap area,  the device-
     to-mount field contains the name of the swap file or device,
     the  FS-type  is "swap", mount-at-boot is "no" and all other
     fields have no entry.

SEE ALSO
     fsck(1M),  mount(1M),   mount_cachefs(1M),   mount_hsfs(1M),
     mount_nfs(1M),   mount_tmpfs(1M),  mount_ufs(1M),  swap(1M),
     getvfsent(3C)

     System Administration Guide, Volume 1

SunOS 5.8           Last change: 17 Aug 1999                    1

论坛徽章:
0
9 [报告]
发表于 2006-08-25 00:03 |只看该作者
谢谢大侠指点,我看到vfstab里最后是有个nosuid,由于我的oracle应用程序和控制文件,重做日志是在不同的文件系统上,数据文件又用的是裸设备,那我应该是把应用程序所在的文件系统做成suid呢?还是应该把日志文件所在的文件系统做成suid?不会是做裸设备吧(能做吗)?

谢谢。

论坛徽章:
0
10 [报告]
发表于 2006-08-25 08:25 |只看该作者
LZ不仔细,看这一段
           -o    Specify   FSType-specific  options  in  a  comma
                 separated  (without  spaces)  list of suboptions
                 and keyword-attribute pairs  for  interpretation
                 by  the   FSType-specific module of the command.
                 (See mount_ufs(1M))

所以,要man mount_ufs
suid | nosuid
      Allow or  disallow  setuid  execution.  The
      default  is   suid. This option can also be
      used when mounting devices.

把ORACLE_HOME所在的文件系统mount成suid即可
您需要登录后才可以回帖 登录 | 注册

本版积分规则 发表回复

  

北京盛拓优讯信息技术有限公司. 版权所有 京ICP备16024965号-6 北京市公安局海淀分局网监中心备案编号:11010802020122 niuxiaotong@pcpop.com 17352615567
未成年举报专区
中国互联网协会会员  联系我们:huangweiwei@itpub.net
感谢所有关心和支持过ChinaUnix的朋友们 转载本站内容请注明原作者名及出处

清除 Cookies - ChinaUnix - Archiver - WAP - TOP