I missed that you had cross-posted to MVS-OE and IBM-Main.
So here is what I posted to MVS-OE yesterday.


>But why EFFECTIVE UID  is  0000999999  in the following messages ?
>Who changed IBMSE41 from UID(0) to UID(999999)?

IBMSE41 has not been changed. You previously showed the output
from an 'ls' on /bin/fomtlinc:

-rwsr-xr-x  --s-  2 OEDFLT   1         344064 Nov 12  2009 /bin/fomtlinc

Notice the setuid bit (the 's' in '-rwsr-xr-x'). This tells the kernel
to run program /bin/fomtlinc in a process with the effective userid
begin set to the owner of /bin/fomtlinc. The owner is, as the 'ls'
shows, a user called OEDFLT.

Display the attributes of OEDFTL and you'll find that this user
has uid=999999.

And this is also the reason for your session recoding problem. The
permission setting on /etc/utmpx doesn't really matter, since 
/bin/fomtlinc is supposed to be run under uid=0, and an uid=0
process has any access to any file.

You should find out why the files you showed, and probably some more,
have had their ownership changed from uid=0 to that of your OEDFTL
user (uid=999999). I'm pretty sure you will eventually run into 
other errors if this does not get fixed.

--
Peter Hunkeler
CREDIT SUISSE AG

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to