Original Message:
Sent: Mon March 20, 2023 06:34 PM
From: Carlton Doe
Subject: Bad permissions on $INFORMIXDIR/tmp after installing CSDK
Well you've asked a question for which I can give my favorite answer . . . . . . . "it depends." :)
If this is installed on a "personal" machine that is not intended for multi-user use, you can install with your UID, usually into a directory of your choosing then you are the only person who can access and use the installation. This applies to engine and CSDK. I'm going to try and attach a screen shot for this.
If you intend to have multi-user use, then both products need to be installed as root.
------------------------------
Carlton Doe
Original Message:
Sent: Mon March 20, 2023 06:12 PM
From: Scot Jenkins
Subject: Bad permissions on $INFORMIXDIR/tmp after installing CSDK
Thanks for the reply Carlton.
I can't remember when CSDK was split off as a separate install but the
12.10 docs [1] stated:
"The standard way to install client products is as the superuser informix
with administrative privileges."
FWIW, the 14.10 docs [2] state the same thing.
I guess I interpreted that as: install IDS/engine as root, and the CSDK
as the 'informix' user. That is how I have been performing installs ever
since. Other than the permissions issue on $INFORMIXDIR/tmp, everything
else seems to be working fine. When installing the CSDK, I am installing
it in $INFORMIXDIR, the same place the IDS/engine is installed.
I'm not a heavy user of Informix or the CSDK, but generally upgrade my
developer copy as new releases come out to have as a reference system.
I guess I should be installing both as the root user then?
scot
[1] https://www.ibm.com/docs/en/informix-servers/12.10?topic=sdk-installation-owner
[2] https://www.ibm.com/docs/en/informix-servers/14.10?topic=sdk-installation-owner
Original Message:
Sent: Mon March 20, 2023 10:34 AM
From: Carlton Doe
Subject: Bad permissions on $INFORMIXDIR/tmp after installing CSDK
Is there a reason you're not installing the CSDK as root? The problem stems for the fact that when the engine is installed as root, directories are created and permissions assigned designed for multi-user access. When the CSDK is installed using a different ID, this is referred to as a Private Install and is intended for use only by that UID. The same holds true for the engine, you can install the engine so only one UID has access to it.
With a follow-on non-root/Private Install, an attempt is made to change the directory permissions without full O/S (aka "privileged") permissions which conflicts with the earlier install resulting in the run-time failure. If the engine and CSDK are installed as root, there isn't an issue.
What may have happened is that FC10 caught that security hole in the installer and fixed it. There are several security updates in the release.
------------------------------
Carlton Doe
Original Message:
Sent: Sun March 19, 2023 11:52 PM
From: Scot Jenkins
Subject: Bad permissions on $INFORMIXDIR/tmp after installing CSDK
I recently upgraded my developer copy of Informix 14.10.FC10 and
the matching CSDK. OS is Linux x86_64.
Something in the CSDK install process munges the permissions on
$INFORMIXDIR/tmp causing the server not to start. This problem
has existed for a while, at least from Informix 12.10 and maybe
versions prior. I've generally just fixed it and moved on but,
it's bugged me for the last time so I though I would report it.
Here's my install process:
First, as root, install informix server using ./ids_install.
I install into a new empty directory.
Verify server starts OK then shut it down.
Next, as user 'informix' install CSDK using ./installclientsdk.
All is good to this point.
Now the problem: when trying to start informix it says:
informix$ oninit -v
directory /opt/ibm/informix/ids14.10.FC10DE/tmp is too secure
(has mode 750, needs 770)
FIX:
informix$ cd $INFORMIXDIR
informix$ ls -ld tmp
drwxr-x--- 2 informix informix 4096 Mar 18 05:26 tmp
informix$ chmod 0770 tmp
informix$ ls -ld tmp
drwxrwx--- 2 informix informix 4096 Mar 18 05:26 tmp
Now informix will start.
Can someone please forward this to the developers or point me
to where this should be reported?
Thanks,
scot