Tuesday, June 28, 2011

ACL on AIX for a File

There is a requirement for an outside user (not a member of DBA group) to get READ acces to alert.log. Since we are on AIX I will show how it should be done on AIX -

export EDITOR=$(which vi)
acledit /oracle/diag/rdbms/testdb/TESTDB/trace/alert_TESTDB.log

as soon as you hit enter, it will open an vi editor and you may need to change

"/tmp/acledit.2908392/aclet-yo7a" 10 lines, 148 characters
*
* ACL_type AIXC
*
attributes:
base permissions
owner(oracle): rw-
group(dba): r--
others: ---
extended permissions
disabled

Change it to -

"/tmp/acledit.2908392/aclet-yo7a" 10 lines, 148 characters
*
* ACL_type AIXC
*
attributes:
base permissions
owner(oracle): rw-
group(dba): r--
others: ---
extended permissions
enabled
permit r-- u:newuser


Here newuser is the user to which we are permitting to READ (r--) alert_TESTDB.log file.