My Oracle Support Banner

CmnSU Does Not Correctly Inherit Group Permissions (Doc ID 2585152.1)

Last updated on SEPTEMBER 06, 2019

Applies to:

Oracle Communications Network Charging and Control - Version 5.0.1 and later
Information in this document applies to any platform.

Symptoms

On Oracle Communications Network Charging and Control (NCC), 5.0.1 version,

ACTUAL BEHAVIOR  
---------------
The npProcessor perl script runs as "smf_oper" from inittab and accesses files uploaded by an external client. This client uses the "np_user" account.

smf_oper belongs to the esg group, but also belongs to the np group. np_user belongs to the np group.

Under normal circumstances, this gives smf_oper group permissions to files owned by np_user:np. This seems to work fine in isolation.

However, the cmnSU binary, which was provided by Oracle to workaround a Solaris 11 inittab issue (the way it handles spawning child processes), doesn't pick up these other group permissions.

Consider the following file:

EXPECTED BEHAVIOR
-----------------------
cmnSU should inherits these group permissions correctly.

STEPS
-----------------------
The issue can be reproduced at will with the following steps:

1.Create a new user with group x
2.Grant group x to smf_oper
3.Create file with 640 permissions owned by group x
4.Try to access said file using cmnSU - smf_oper

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.