Penetration Testing mailing list archives

Re: [PEN-TEST] Informix


From: Gregor Binder <gbinder () sysfive com>
Date: Mon, 2 Oct 2000 13:26:02 +0200

Craig, Scott on Fri, Sep 29, 2000 at 08:39:58AM -0400:

Hi,

   Also check the raw partitions on the Unix host, and then check the
filesystem permissions to those partitions. Use the informix command "onstat
-d" for printing spaces and chunks to determine the partitions, and check
the onconfig files in $INFORMIXDIR/etc. The DBA can probably tell you
exactly where the partitions are... such as /dev/rootdbs .. or whatever they
call it. I believe they can put them just about anywhere.

This is not really specific to Informix, but if you use Volume Manager
to manage your disks, make sure that permissions on your dbs's is set
using vxedit and not chmod on the raw devices themselves.

This is because permission and ownership information is stored in the
diskgroup, and if you ever happen to export/import the diskgroup to
the same or another host, it will still be the same.

Greetings,
  Gregor.


Current thread: