CmnSU Does Not Correctly Inherit Group Permissions
(Doc ID 2585152.1)
Last updated on SEPTEMBER 06, 2019
Applies to:Oracle Communications Network Charging and Control - Version 5.0.1 and later
Information in this document applies to any platform.
On Oracle Communications Network Charging and Control (NCC), 5.0.1 version,
The npProcessor perl script runs as "smf_oper" from inittab and accesses files uploaded by an external client. This client uses the "np_user" account.
smf_oper belongs to the esg group, but also belongs to the np group. np_user belongs to the np group.
Under normal circumstances, this gives smf_oper group permissions to files owned by np_user:np. This seems to work fine in isolation.
However, the cmnSU binary, which was provided by Oracle to workaround a Solaris 11 inittab issue (the way it handles spawning child processes), doesn't pick up these other group permissions.
Consider the following file:
cmnSU should inherits these group permissions correctly.
The issue can be reproduced at will with the following steps:
1.Create a new user with group x
2.Grant group x to smf_oper
3.Create file with 640 permissions owned by group x
4.Try to access said file using cmnSU - smf_oper
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document