AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.

 View Only
  • 1.  chattr like features in aix

    Posted Thu February 13, 2014 04:42 AM

    Originally posted by: aashishgr


    hello friend

    i require chattr like functionalities in aix 6.1 .I was unable to find one.

    I want a file to be immutable and appendable ,are there any thing to achive that in aix.

    please help!!!!1



  • 2.  Re: chattr like features in aix

    Posted Tue March 11, 2014 06:18 PM

    Originally posted by: GarlandJoseph


    There is no equivalent function in aix...try using CHMOD (The GPFS filesystem that can run on AIX does have immutable and appendable options.



  • 3.  Re: chattr like features in aix

    Posted Wed March 12, 2014 01:55 AM

    Originally posted by: aashishgr


    First of all Thank You Joseph

     But can we install gpfs package in jfs2 file system to use the mmchattr functionalities available with gpfs

    And can immutability is achived via CHMOD , I also tried ACL but root can delete such files any way.

    So please ,can you help me with this.



  • 4.  Re: chattr like features in aix

    Posted Wed March 12, 2014 04:19 AM

    Originally posted by: Wouter Liefting


    The "immutable" and "append only" attributes are attributes of the file system itself. They're supported in ext2/3/4 (Linux) and GPFS (both on Linux and AIX) but not on JFS/JFS2 (AIX).

    So it's not enough to install the GPFS package: You also need to convert your JFS2 filesystem to GPFS. (Probably through a backup/restore operation: There is no "upgrade" path from JFS2 to GPFS, or something like that.)

    I'm curious about your use case though. Yes, root can change the permissions and ACLs through chmod, but root can also change the immutable and append only flags. So it doesn't matter whether a file is read only or immutable: root will be able to change that file anyway, and there is no effective way of preventing this. Not on AIX and not on Linux. Indirectly you might be able to achieve something like that through SELinux or RBAC though.