Informix

I recently upgraded my developer copy of Informix 14.10.FC10 and
the matching CSDK.  OS is Linux x86_64.

Something in the CSDK install process munges the permissions on
$INFORMIXDIR/tmp causing the server not to start.  This problem
has existed for a while, at least from Informix 12.10 and maybe
versions prior.  I've generally just fixed it and moved on but,
it's bugged me for the last time so I though I would report it.

Here's my install process:

First, as root, install informix server using ./ids_install.
I install into a new empty directory.
Verify server starts OK then shut it down.
Next, as user 'informix' install CSDK using ./installclientsdk.
All is good to this point.

Now the problem:  when trying to start informix it says:
informix$ oninit -v
directory /opt/ibm/informix/ids14.10.FC10DE/tmp is too secure
(has mode 750, needs 770)


FIX:

informix$ cd $INFORMIXDIR
informix$ ls -ld tmp
drwxr-x--- 2 informix informix 4096 Mar 18 05:26 tmp

informix$ chmod 0770 tmp
informix$ ls -ld tmp
drwxrwx--- 2 informix informix 4096 Mar 18 05:26 tmp
                                                                         
Now informix will start.


Can someone please forward this to the developers or point me
to where this should be reported?

Thanks,
scot

Scot:

Done. Reported to the IBM Product Manager.

Art

I recently upgraded my developer copy of Informix 14.10.FC10 and
the matching CSDK.  OS is Linux x86_64.

Something in the CSDK install process munges the permissions on
$INFORMIXDIR/tmp causing the server not to start.  This problem
has existed for a while, at least from Informix 12.10 and maybe
versions prior.  I've generally just fixed it and moved on but,
it's bugged me for the last time so I though I would report it.

Here's my install process:

First, as root, install informix server using ./ids_install.
I install into a new empty directory.
Verify server starts OK then shut it down.
Next, as user 'informix' install CSDK using ./installclientsdk.
All is good to this point.

Now the problem:  when trying to start informix it says:
informix$ oninit -v
directory /opt/ibm/informix/ids14.10.FC10DE/tmp is too secure
(has mode 750, needs 770)


FIX:

informix$ cd $INFORMIXDIR
informix$ ls -ld tmp
drwxr-x--- 2 informix informix 4096 Mar 18 05:26 tmp

informix$ chmod 0770 tmp
informix$ ls -ld tmp
drwxrwx--- 2 informix informix 4096 Mar 18 05:26 tmp
                                                                         
Now informix will start.


Can someone please forward this to the developers or point me
to where this should be reported?

Thanks,
scot

Thanks Art!

Scot:

Done. Reported to the IBM Product Manager.

Art

I recently upgraded my developer copy of Informix 14.10.FC10 and
the matching CSDK.  OS is Linux x86_64.

Something in the CSDK install process munges the permissions on
$INFORMIXDIR/tmp causing the server not to start.  This problem
has existed for a while, at least from Informix 12.10 and maybe
versions prior.  I've generally just fixed it and moved on but,
it's bugged me for the last time so I though I would report it.

Here's my install process:

First, as root, install informix server using ./ids_install.
I install into a new empty directory.
Verify server starts OK then shut it down.
Next, as user 'informix' install CSDK using ./installclientsdk.
All is good to this point.

Now the problem:  when trying to start informix it says:
informix$ oninit -v
directory /opt/ibm/informix/ids14.10.FC10DE/tmp is too secure
(has mode 750, needs 770)


FIX:

informix$ cd $INFORMIXDIR
informix$ ls -ld tmp
drwxr-x--- 2 informix informix 4096 Mar 18 05:26 tmp

informix$ chmod 0770 tmp
informix$ ls -ld tmp
drwxrwx--- 2 informix informix 4096 Mar 18 05:26 tmp
                                                                         
Now informix will start.


Can someone please forward this to the developers or point me
to where this should be reported?

Thanks,
scot

Scot:

You are welcome. That's what the IIUG is here for. IBM is working on a fix for this, but Carlton has a point. If you installed the engine as root you probably should have installed the CSDK as root as well.

Also, while the old "Rule of TEN" is no longer mandatory, it is still a good idea to install tools (4GL, ISQL, & CSDK) before installing the engine. Optional, but a good idea.

Art

Thanks Art!

Scot:

Done. Reported to the IBM Product Manager.

Art

I recently upgraded my developer copy of Informix 14.10.FC10 and
the matching CSDK.  OS is Linux x86_64.

Something in the CSDK install process munges the permissions on
$INFORMIXDIR/tmp causing the server not to start.  This problem
has existed for a while, at least from Informix 12.10 and maybe
versions prior.  I've generally just fixed it and moved on but,
it's bugged me for the last time so I though I would report it.

Here's my install process:

First, as root, install informix server using ./ids_install.
I install into a new empty directory.
Verify server starts OK then shut it down.
Next, as user 'informix' install CSDK using ./installclientsdk.
All is good to this point.

Now the problem:  when trying to start informix it says:
informix$ oninit -v
directory /opt/ibm/informix/ids14.10.FC10DE/tmp is too secure
(has mode 750, needs 770)


FIX:

informix$ cd $INFORMIXDIR
informix$ ls -ld tmp
drwxr-x--- 2 informix informix 4096 Mar 18 05:26 tmp

informix$ chmod 0770 tmp
informix$ ls -ld tmp
drwxrwx--- 2 informix informix 4096 Mar 18 05:26 tmp
                                                                         
Now informix will start.


Can someone please forward this to the developers or point me
to where this should be reported?

Thanks,
scot

I always though the engine should be installed, then the CSDK.

I guess I have been doing it wrong.  Live and learn.

Scot:

You are welcome. That's what the IIUG is here for. IBM is working on a fix for this, but Carlton has a point. If you installed the engine as root you probably should have installed the CSDK as root as well.

Also, while the old "Rule of TEN" is no longer mandatory, it is still a good idea to install tools (4GL, ISQL, & CSDK) before installing the engine. Optional, but a good idea.

Art

Thanks Art!

Scot:

Done. Reported to the IBM Product Manager.

Art

I recently upgraded my developer copy of Informix 14.10.FC10 and
the matching CSDK.  OS is Linux x86_64.

Something in the CSDK install process munges the permissions on
$INFORMIXDIR/tmp causing the server not to start.  This problem
has existed for a while, at least from Informix 12.10 and maybe
versions prior.  I've generally just fixed it and moved on but,
it's bugged me for the last time so I though I would report it.

Here's my install process:

First, as root, install informix server using ./ids_install.
I install into a new empty directory.
Verify server starts OK then shut it down.
Next, as user 'informix' install CSDK using ./installclientsdk.
All is good to this point.

Now the problem:  when trying to start informix it says:
informix$ oninit -v
directory /opt/ibm/informix/ids14.10.FC10DE/tmp is too secure
(has mode 750, needs 770)


FIX:

informix$ cd $INFORMIXDIR
informix$ ls -ld tmp
drwxr-x--- 2 informix informix 4096 Mar 18 05:26 tmp

informix$ chmod 0770 tmp
informix$ ls -ld tmp
drwxrwx--- 2 informix informix 4096 Mar 18 05:26 tmp
                                                                         
Now informix will start.


Can someone please forward this to the developers or point me
to where this should be reported?

Thanks,
scot

I recently upgraded my developer copy of Informix 14.10.FC10 and
the matching CSDK.  OS is Linux x86_64.

Something in the CSDK install process munges the permissions on
$INFORMIXDIR/tmp causing the server not to start.  This problem
has existed for a while, at least from Informix 12.10 and maybe
versions prior.  I've generally just fixed it and moved on but,
it's bugged me for the last time so I though I would report it.

Here's my install process:

First, as root, install informix server using ./ids_install.
I install into a new empty directory.
Verify server starts OK then shut it down.
Next, as user 'informix' install CSDK using ./installclientsdk.
All is good to this point.

Now the problem:  when trying to start informix it says:
informix$ oninit -v
directory /opt/ibm/informix/ids14.10.FC10DE/tmp is too secure
(has mode 750, needs 770)


FIX:

informix$ cd $INFORMIXDIR
informix$ ls -ld tmp
drwxr-x--- 2 informix informix 4096 Mar 18 05:26 tmp

informix$ chmod 0770 tmp
informix$ ls -ld tmp
drwxrwx--- 2 informix informix 4096 Mar 18 05:26 tmp
                                                                         
Now informix will start.


Can someone please forward this to the developers or point me
to where this should be reported?

Thanks,
scot

Is there a reason you're not installing the CSDK as root? The problem stems for the fact that when the engine is installed as root, directories are created and permissions assigned designed for multi-user access. When the CSDK is installed using a different ID, this is referred to as a Private Install and is intended for use only by that UID. The same holds true for the engine, you can install the engine so only one UID has access to it.

With a follow-on non-root/Private Install, an attempt is made to change the directory permissions without full O/S (aka "privileged") permissions which conflicts with the earlier install resulting in the run-time failure.  If the engine and CSDK are installed as root, there isn't an issue.

What may have happened is that FC10 caught that security hole in the installer and fixed it. There are several security updates in the release.

------------------------------
Carlton Doe

Original Message:
Sent: Sun March 19, 2023 11:52 PM
From: Scot Jenkins
Subject: Bad permissions on $INFORMIXDIR/tmp after installing CSDK

I recently upgraded my developer copy of Informix 14.10.FC10 and
the matching CSDK.  OS is Linux x86_64.

Something in the CSDK install process munges the permissions on
$INFORMIXDIR/tmp causing the server not to start.  This problem
has existed for a while, at least from Informix 12.10 and maybe
versions prior.  I've generally just fixed it and moved on but,
it's bugged me for the last time so I though I would report it.

Here's my install process:

First, as root, install informix server using ./ids_install.
I install into a new empty directory.
Verify server starts OK then shut it down.
Next, as user 'informix' install CSDK using ./installclientsdk.
All is good to this point.

Now the problem:  when trying to start informix it says:
informix$ oninit -v
directory /opt/ibm/informix/ids14.10.FC10DE/tmp is too secure
(has mode 750, needs 770)


FIX:

informix$ cd $INFORMIXDIR
informix$ ls -ld tmp
drwxr-x--- 2 informix informix 4096 Mar 18 05:26 tmp

informix$ chmod 0770 tmp
informix$ ls -ld tmp
drwxrwx--- 2 informix informix 4096 Mar 18 05:26 tmp
                                                                         
Now informix will start.


Can someone please forward this to the developers or point me
to where this should be reported?

Thanks,
scot

Thanks for the reply Carlton.

I can't remember when CSDK was split off as a separate install but the
12.10 docs [1] stated:

"The standard way to install client products is as the superuser informix
with administrative privileges."

FWIW, the 14.10 docs [2] state the same thing.

I guess I interpreted that as:  install IDS/engine as root, and the CSDK 
as the 'informix' user.  That is how I have been performing installs ever
since.  Other than the permissions issue on $INFORMIXDIR/tmp, everything
else seems to be working fine.  When installing the CSDK, I am installing
it in $INFORMIXDIR, the same place the IDS/engine is installed.

I'm not a heavy user of Informix or the CSDK, but generally upgrade my
developer copy as new releases come out to have as a reference system.

I guess I should be installing both as the root user then?

scot

[1] https://www.ibm.com/docs/en/informix-servers/12.10?topic=sdk-installation-owner
[2] https://www.ibm.com/docs/en/informix-servers/14.10?topic=sdk-installation-owner

Original Message:
Sent: Mon March 20, 2023 10:34 AM
From: Carlton Doe
Subject: Bad permissions on $INFORMIXDIR/tmp after installing CSDK

Is there a reason you're not installing the CSDK as root? The problem stems for the fact that when the engine is installed as root, directories are created and permissions assigned designed for multi-user access. When the CSDK is installed using a different ID, this is referred to as a Private Install and is intended for use only by that UID. The same holds true for the engine, you can install the engine so only one UID has access to it.

With a follow-on non-root/Private Install, an attempt is made to change the directory permissions without full O/S (aka "privileged") permissions which conflicts with the earlier install resulting in the run-time failure.  If the engine and CSDK are installed as root, there isn't an issue.

What may have happened is that FC10 caught that security hole in the installer and fixed it. There are several security updates in the release.

------------------------------
Carlton Doe

Original Message:
Sent: Sun March 19, 2023 11:52 PM
From: Scot Jenkins
Subject: Bad permissions on $INFORMIXDIR/tmp after installing CSDK

I recently upgraded my developer copy of Informix 14.10.FC10 and
the matching CSDK.  OS is Linux x86_64.

Something in the CSDK install process munges the permissions on
$INFORMIXDIR/tmp causing the server not to start.  This problem
has existed for a while, at least from Informix 12.10 and maybe
versions prior.  I've generally just fixed it and moved on but,
it's bugged me for the last time so I though I would report it.

Here's my install process:

First, as root, install informix server using ./ids_install.
I install into a new empty directory.
Verify server starts OK then shut it down.
Next, as user 'informix' install CSDK using ./installclientsdk.
All is good to this point.

Now the problem:  when trying to start informix it says:
informix$ oninit -v
directory /opt/ibm/informix/ids14.10.FC10DE/tmp is too secure
(has mode 750, needs 770)


FIX:

informix$ cd $INFORMIXDIR
informix$ ls -ld tmp
drwxr-x--- 2 informix informix 4096 Mar 18 05:26 tmp

informix$ chmod 0770 tmp
informix$ ls -ld tmp
drwxrwx--- 2 informix informix 4096 Mar 18 05:26 tmp
                                                                         
Now informix will start.


Can someone please forward this to the developers or point me
to where this should be reported?

Thanks,
scot

Well you've asked a question for which I can give my favorite answer . . . . . .  . "it depends."   :)

If this is installed on a "personal" machine that is not intended for multi-user use, you can install with your UID, usually into a directory of your choosing then you are the only person who can access and use the installation. This applies to engine and CSDK. I'm going to try and attach a screen shot for this.

If you intend to have multi-user use, then both products need to be installed as root.

------------------------------
Carlton Doe

Original Message:
Sent: Mon March 20, 2023 06:12 PM
From: Scot Jenkins
Subject: Bad permissions on $INFORMIXDIR/tmp after installing CSDK

Thanks for the reply Carlton.

I can't remember when CSDK was split off as a separate install but the
12.10 docs [1] stated:

"The standard way to install client products is as the superuser informix
with administrative privileges."

FWIW, the 14.10 docs [2] state the same thing.

I guess I interpreted that as:  install IDS/engine as root, and the CSDK 
as the 'informix' user.  That is how I have been performing installs ever
since.  Other than the permissions issue on $INFORMIXDIR/tmp, everything
else seems to be working fine.  When installing the CSDK, I am installing
it in $INFORMIXDIR, the same place the IDS/engine is installed.

I'm not a heavy user of Informix or the CSDK, but generally upgrade my
developer copy as new releases come out to have as a reference system.

I guess I should be installing both as the root user then?

scot

[1] https://www.ibm.com/docs/en/informix-servers/12.10?topic=sdk-installation-owner
[2] https://www.ibm.com/docs/en/informix-servers/14.10?topic=sdk-installation-owner

Original Message:
Sent: Mon March 20, 2023 10:34 AM
From: Carlton Doe
Subject: Bad permissions on $INFORMIXDIR/tmp after installing CSDK

Is there a reason you're not installing the CSDK as root? The problem stems for the fact that when the engine is installed as root, directories are created and permissions assigned designed for multi-user access. When the CSDK is installed using a different ID, this is referred to as a Private Install and is intended for use only by that UID. The same holds true for the engine, you can install the engine so only one UID has access to it.

With a follow-on non-root/Private Install, an attempt is made to change the directory permissions without full O/S (aka "privileged") permissions which conflicts with the earlier install resulting in the run-time failure.  If the engine and CSDK are installed as root, there isn't an issue.

What may have happened is that FC10 caught that security hole in the installer and fixed it. There are several security updates in the release.

------------------------------
Carlton Doe

Original Message:
Sent: Sun March 19, 2023 11:52 PM
From: Scot Jenkins
Subject: Bad permissions on $INFORMIXDIR/tmp after installing CSDK

I recently upgraded my developer copy of Informix 14.10.FC10 and
the matching CSDK.  OS is Linux x86_64.

Something in the CSDK install process munges the permissions on
$INFORMIXDIR/tmp causing the server not to start.  This problem
has existed for a while, at least from Informix 12.10 and maybe
versions prior.  I've generally just fixed it and moved on but,
it's bugged me for the last time so I though I would report it.

Here's my install process:

First, as root, install informix server using ./ids_install.
I install into a new empty directory.
Verify server starts OK then shut it down.
Next, as user 'informix' install CSDK using ./installclientsdk.
All is good to this point.

Now the problem:  when trying to start informix it says:
informix$ oninit -v
directory /opt/ibm/informix/ids14.10.FC10DE/tmp is too secure
(has mode 750, needs 770)


FIX:

informix$ cd $INFORMIXDIR
informix$ ls -ld tmp
drwxr-x--- 2 informix informix 4096 Mar 18 05:26 tmp

informix$ chmod 0770 tmp
informix$ ls -ld tmp
drwxrwx--- 2 informix informix 4096 Mar 18 05:26 tmp
                                                                         
Now informix will start.


Can someone please forward this to the developers or point me
to where this should be reported?

Thanks,
scot