RE: sar

Nuno,

The claim is "The sar command supports a parameter that would allow overwriting of any file." I don't have time right now to check if that is true (never heard of it, though that's definitely not conclusive evidence). Just asked for sudo sar -P ALL for the time being.

Thanks.

Henry

-----Original Message-----
Nuno Souto
Sent: Friday, August 01, 2003 6:35 AM
To: Multiple recipients of list ORACLE-L

That's weird. I'm not aware of any security issues relating to sar and its use. Sounds like paranoia mode just because the thing might have the setuid bit on. Which means nothing as far as security goes, unless sar allows interactive command shells. Which it doesn't.
Cheers
Nuno Souto
nsouto_at_optusnet.com.au
----- Original Message -----
To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com> Sent: Friday, August 01, 2003 1:44 AM

> Just got this email from my SysAdmin when I asked for access to sar.
Anyone
> know what he is talking about? We are on AIX 4 and 5.
>
> "I cannot give you direct access to the sar command. Because of the
> parameters
> the command allows, it would be equivalent to giving full root access.
>
> If you could give me some details on the kind of information you would
like
> to
> be able to collect, maybe we could set up some kind of command to obtain
> it."
>

--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Nuno Souto
  INET: nsouto_at_optusnet.com.au

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Henry Poras
  INET: hporas_at_etal.uri.edu

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).