Re: filesystem permissions using dump on live filesystem

2004-02-24 Thread Ruben de Groot
On Tue, Feb 24, 2004 at 12:32:07AM -0500, Garance A Drosihn typed:
 At 11:47 PM -0500 2/23/04, Aaron Peterson wrote:
   i put a user in the operator group in /etc/group:
 
 -snip-
 
  and attempted to dump a live filesystem:
 
 -snip-
 
  what am i missing here?
 
 nevermind.  i had to log out and log back in.  that solved my
 problems.   now my only question is why does one have to log
 out and log in for addition to a new group to take effect?
 
 It is expected that the list of groups that you are a member of
 will not change very frequently.  Thus, the list of your groups
 is computed at login time, and is kept in memory.
 
 If this was not done, then *anything* which checked your groups
 for access (such as reading a file) would have to read through
 all of /etc/group to re-calculate that list of groups.  Now, it
 would be easy enough to optimize that simple case (on a machine
 using just /etc/group), but there is no simple optimization if
 on machines which are using something like NIS+ or other network
 directory services to hold the group information.
 
 If we really really had to, we could implement something that
 did that job acceptably well, but it's much easier to just
 tell people log out, and log back in.  Or don't even logout,
 just 'ssh -l localhost' and start a new session.

I would usually just type newgrp operators

Ruben

 -- 
 Garance Alistair Drosehn=   [EMAIL PROTECTED]
 Senior Systems Programmer   or  [EMAIL PROTECTED]
 Rensselaer Polytechnic Instituteor  [EMAIL PROTECTED]
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


filesystem permissions using dump on live filesystem

2004-02-23 Thread Aaron Peterson
i put a user in the operator group in /etc/group:

wkstn% pw groupshow operator
operator:*:5:root,alpete

and attempted to dump a live filesystem:

wkstn% dump -L -0u -f /mnt/storage/incoming/dump_test.dmp /usr
/sbin/mksnap_ffs: Permission denied
dump: Cannot create /usr/.snap/dump_snapshot: No such file or directory

wkstn%

wkstn% ls -la /usr
total 58
drwxr-xr-x  20 root  wheel  512 Feb 14 20:32 ./
drwxr-xr-x  20 root  wheel  512 Feb 20 00:58 ../
drwxrwxr-x   2 root  operator   512 Feb 13 18:59 .snap/
 --snip--

wkstn% cd /usr/.snap
wkstn% touch test.tmp
touch: test.tmp: Permission denied
wkstn%

what am i missing here?
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: filesystem permissions using dump on live filesystem

2004-02-23 Thread Aaron Peterson
 i put a user in the operator group in /etc/group:

-snip-

 and attempted to dump a live filesystem:

-snip-

 what am i missing here?

nevermind.  i had to log out and log back in.  that solved me problems. 
now my only question is why does one have to log out and log in for
addition to a new group to take effect?
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: filesystem permissions using dump on live filesystem

2004-02-23 Thread Kevin D. Kinsey, DaleCo, S.P.
Aaron Peterson wrote:

i put a user in the operator group in /etc/group:
   

-snip-

 

and attempted to dump a live filesystem:
   

-snip-

 

what am i missing here?
   

nevermind.  i had to log out and log back in.  that solved me problems. 
now my only question is why does one have to log out and log in for
addition to a new group to take effect?
 

Why does adding an environment variable
to your .profile, .login, or .cshrc not affect
your environment unless you source the
file?
Why must you -SIGHUP a daemon after
changing its configuration file?
Why does adding a virthost to your
httpd.conf not take effect until you
restart the daemon?
The system has to be informed *somehow*
that you've changed something
Let's face it, it's much better than
you have to restart your computer
for changes to take effect.  Do you
wish to shut down your computer now?
;-)

Kevin Kinsey
DaleCo, S.P.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: filesystem permissions using dump on live filesystem

2004-02-23 Thread Garance A Drosihn
At 11:47 PM -0500 2/23/04, Aaron Peterson wrote:
  i put a user in the operator group in /etc/group:

-snip-

 and attempted to dump a live filesystem:
-snip-

 what am i missing here?
nevermind.  i had to log out and log back in.  that solved my
problems.   now my only question is why does one have to log
out and log in for addition to a new group to take effect?
It is expected that the list of groups that you are a member of
will not change very frequently.  Thus, the list of your groups
is computed at login time, and is kept in memory.
If this was not done, then *anything* which checked your groups
for access (such as reading a file) would have to read through
all of /etc/group to re-calculate that list of groups.  Now, it
would be easy enough to optimize that simple case (on a machine
using just /etc/group), but there is no simple optimization if
on machines which are using something like NIS+ or other network
directory services to hold the group information.
If we really really had to, we could implement something that
did that job acceptably well, but it's much easier to just
tell people log out, and log back in.  Or don't even logout,
just 'ssh -l localhost' and start a new session.
--
Garance Alistair Drosehn=   [EMAIL PROTECTED]
Senior Systems Programmer   or  [EMAIL PROTECTED]
Rensselaer Polytechnic Instituteor  [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]