Need to give DBA's permission to run chfs in AIX

[Edward1982]

Question: What is the best way to give DBA's permission to increase a file size? I've looked into SUDO and that's not an option. The two commands they need to run are smit and chfs. Thanks in advance.

 

[victorv]

hi,

probably you mean "file system" size; smit is just a launcher, the command to increase file system size is chfs.

chfs -a size=newsize /filesystem/name

(where size in 512 KB-blocks)
(those you see by df, without -k)

(in current versions of AIX there are more options to give
the difference or other)

The problem is that if you "unprotect" chfs bye sudo,
the DBA may alter other fs.

bye
vic

 

[Edward1982]

Thanks for responding Victorv. I'm trying to make it easy for the DBA's to change the file sysytem size by using smitty opposed to using the command line option. They might have to use the command line. I've investigated using SUDO and by giving them access to smit fs, I've given them root access to everything, which is bad. (They can pop out to a root shell.) Any ideas? Can I put them in a group or something and change the permission on chfs??

 

[victorv]

hi,

sudo chfs + a script in which he pass the new size (or delta) ?

bye

 

[p5wizard]

A sudo to smit chfs is still an option, just make sure that the shell escape is prohibited, e.g. by setting
[tt]SHELL=/usr/bin/sorry[/tt]
before executing smit...


HTH,

p5wizard

 

[khalidaaa]

I thought of doing the same with our DBAs but then i didn't want the DBAs to screw up with clustered fs as well! so i didn't do it!

I don't think it is a good idea!

Reagrds,
Khalid