How to set permissions on devicemapper block device

I'm setting up a new RAC on RHEL5.1 using device mapper for multipath functionality.
How should I set the permissions for the block devices I'm going to use for ocr, voting and asm?
/dev/mapper/ocr1
/dev/mapper/voting1
etc.
Regards
Jon-Arne Storelv

Markus,
You are right about udev changing drastically between RHEL 4 and RHEL 5. The paper I referred to does include some guidelines for setting permissions for RHEL 5 as well. Here are some relevant extracts from the same pdf document:-
# From udev.permissions section
This file was obsoleted in later versions of the 2.6 kernels such as SLES10, RHEL5 and
Oracle Enterprise Linux 5 (OEL5), that functionality was merged into the rules files, which is explained later in this paper
...and later you will find this example in the document
For RHEL5, OEL5, SLES10
• Create a file /etc/udev/rules.d/99-raw.rules with the following content
with the following content
KERNEL=="raw[1-2]*", GROUP="oinstall", MODE="640"
KERNEL=="raw[3-5]*", OWNER="oracle", GROUP="oinstall", MODE="660"
/etc/udev/rules.d/50-udev.rules on Centos 5 gives plenty of examples of settings for all different types of devices. We really need to specify OWNER, GROUP and MODE for devices that RAC will use in a rules file.
Thanks,
Satish

Similar Messages

  • How to set permissions to allow reading on more than one device

    Our base permissions restrict reading to one device for 365 days with print 1 page and copy 1 page limits. For a new book we're adding to our online library, we want to allow people to read on more than one device, with a defined expiration date (January 15, 2012) and no printing and no copying. (The "more than one device" restriction is intended to allow users to transfer the book to iTunes and read it in Bluefire Reader.)
    How do we set permissions for this new book? In particular, what Read settings for devices do we use? No selection? The options in the ACS Console are not clear to us (i.e., the choice between A Single Device and Specific Device Type) and the manual doesn't offer an example. ... I'm guessing the selections should be none -- i.e., do not specify any device setting. Yes?
    Any help would be appreciated.
    Jim Lyons

    What I understand your current side restrictions to be (best if they are in a distribution right rather than base permission btw)
    <permissions>
    <display>
         <device />
         <duration>31536000</duration>
    <display>
    <print>
      <count initial="1"/>
    </print>
    <excerpt>
        <count initial="1"/>
    </excerpt>
    </permissions>
    What I think you want
    <permissions>
    <display>
         <device />
         <duration>31536000</duration>
    </display>
    <display>
         <deviceType>mobile</deviceType>
         <until>2012-01-15T00:00:00-8:00</until>
    </display>
    <display>
         <deviceType>tethered</deviceType>
         <until>2012-01-15T00:00:00-8:00</until>
    </display>
    <print>
      <count initial="1"/>
    </print>
    <excerpt>
        <count initial="1"/>
    </excerpt>
    </permissions>
    (these are looking at the raw permissions rather than the dialog in the admin console)
    Which I would describe as allow viewing on the device which fulfilled the content for one year, and in addition allow viewing on any mobile or tethered device (Bluefire Reader iPad app, android app, Nook Color, etc...) until Jan 15, 2010 at midnight PST.  One print and one copy is allowed (and can only be used on the device that fulfilled the content).

  • How to set permissions IN Open Directory USING Open Directory groups?

    Hi all,
    Apologies if I've missed this but have been searching for two days trying to figure out how to delegate permissions within the OD to a number of different OD groups and i can't seem to find any way to do this either at the command line or with WGM.
    Examples: an OD group containing those who will manage the full directory need to have permissions on all containers, child objects, and their attributes in the directory. For this one in particular I seem to be able to nest a group in the default Admin group, but this isn't really what i'm after. I need to create OD groups with the ability only to manipulate objects of class apple-computer and similarly, apple-user (really all inetOrgPerson objects). In a nutshell: how do i set permissions on specific attributes or object classes using OD groups?
    thanks for any pointers...
    -andrew

    I think i just answered my own question: Open Directory is OpenLDAP. slapd is all i need.

  • How can set permissions in iSQL *Plus

    Copyright (c) 1982, 2005, Oracle. All rights reserved.
    SQL*Loader-704: Internal error: ulconnect: OCIServerAttach [0]
    ORA-12546: TNS:permission denied
    I have system password. how can i set permissions in isql *plus
    thanks & regards

    Fatal NI connect error 12546, connecting to:
    (DESCRIPTION=(ADDRESS=(PROTOCOL=beq)(PROGRAM=/opt/oracle/product/10.2/db_1/bin/oracle)(ARGV0=oracleorcl)(ARGS='(DESCRIPTION=(LOCAL=YES)(ADDRESS=(PROTOCOL=beq)))')(DETACH=NO))(CONNECT_DATA=(CID=(PROGRAM=imp)(HOST=globalsteelweb.com)(USER=root))))
    VERSION INFORMATION:
         TNS for Linux: Version 10.2.0.1.0 - Production
         Oracle Bequeath NT Protocol Adapter for Linux: Version 10.2.0.1.0 - Production
         TCP/IP NT Protocol Adapter for Linux: Version 10.2.0.1.0 - Production
    Time: 30-MAY-2007 09:27:08
    Tracing not turned on.
    Tns error struct:
    ns main err code: 12546
    TNS-12546: TNS:permission denied
    ns secondary err code: 12560
    nt main err code: 516
    TNS-00516: Permission denied
    nt secondary err code: 13
    nt OS err code: 0

  • How to set movement or transfer block during Physical Inventory

    Hello Team,
    I was wondering if someone could help with how to set
    Material Movement block for the entire plant during physical inventory.
    I will appreciate any input.

    The inventory process in general in equal.
    creating document - printing documents - counting - enter count - (recount) - post difference.
    It is just the step of creating documents which differs between MI01 and MI31.
    MI01 wants that the user to enters the material to be counted manually.
    While in MI31 you have a huge selection screen, that allows you to create inventory documents for several location at the same time, while SAP  takes the materials according to your selection criterias.
    MI31 can be executed to create the documents directly or by batch input, in earlier releases it was only possible thru batch input.

  • How to set permissions like "For all users" with Sandbox

    Hello!
    Hello!
    I am using Sandbox for Mac OS X Leopard and I've got a question to you:
    How can I set up a folder to behave like the For all users folder in the users directory?
    Greetings

    Well, sandbox sets ACL's not posix permissions. The sticky bit is a posix permission. Sand box will allow you to do something similar to the sticky bit using ACL's, but the exact duplication of the sticky bit is not possible, but something just as useful or more useful can be easily implemented.
    To set the sticky bit you will need an app called FileXaminer or the Terminal.app command line.
    to set the sticky bit simply put "1" in front of the the permissions number when you run chmod on the command line, here is an example:
    chmod 1775 /users/data/shared #assigns permissions 775 and the sticky bit#
    chmod 775 /users/data/shared #assigns permissions 775 without the sticky bit#
    note: note actual use of the chmod and chown commands will, in most cases require the sudo (super user do) command to be used with them. example:
    sudo chmod 1775 /users/data/shared #assigns temporary super user priviledge#
    The way I set my shared user's directories with ACL's is this:
    first I created folder /users/data -permissions=777 (everyone).
    I had three users so I created folders for each in /users/data:
    /users/data/user1 #this is just example-substitute real user name#
    /users/data/user2
    /users/data/user3 #etc,etc,#
    set the posix permission on each user folder 700 (owner:read,write,execute)
    set the owner and group on each one accordingly:
    chown user1:staff /users/data/user1 #substitute real user name#
    chown user2:staff /users/data/user2
    chown user3:staff /users/data/user3 #(etc,etc)#
    Now each user has their own data folder they can read and write to at will (when they are logged in to their user account).
    They can safely create and maintain their data and no one can delete it.
    Since these are shared data accounts. other users will need to read the data, this is where the ACL's come in.
    You will need to use Sandbox to place ACL's for each allowed user, on each of the user directories:
    0: user:joe inherited allow list,addfile,search,add_subdirectory,readattr,writeattr,readextattr,writeextattr,readsec urity,file_inherit,directoryinherit
    1: user:mary inherited allow list,addfile,search,add_subdirectory,readattr,writeattr,readextattr,writeextattr,readsec urity,file_inherit,directoryinherit
    2: user:sue inherited allow list,addfile,search,add_subdirectory,readattr,writeattr,readextattr,writeextattr,readsec urity,file_inherit,directoryinherit
    Basically with the above ACL's the only thing the allowed user can't do is delete files. They can copy files, they can add files, etc. This behavior is somewhat similar to what can be accomplished with the sticky bit, but much more controlled and structured. That is the beauty of using ACL's.
    Using SandBox you can taylor the permissions as you see fit for each every user. You can set permissions for an administrator to delete files as well. You can take away or add permissions for each user as you see fit. let your imagination be your guide.
    ACL's weren't meant to replace posix permissions, but rather to allow administrators to fine tune user permissions.
    Kj

  • How to set permissions for folder?

    Dear all,
    How can iset permissions for a particular folder?
    I am creating new folders for new users  who access the program. 
    Is there any way yo set permissions so that no one is able to edit the name of the folder ?
    Thanks,
    Ritesh

    Hi Ritesh,
    Thanks for the post and I hope your well today.
    You can programmatically change the Read Only and Hidden Status of a file
    in labview using the DOS prompt from LabVIEW - called
    System.Execvi.
    Here are some links regarding the DOS commands you can use,
    http://www.ss64.com/nt/subinacl.html
    http://www.ss64.com/nt/cacls.html 
    So I beleive you could find a DOS command which could alter the editting properties of the name..
    Another way to prevent the user altering the file would be to change
    the user permission's in windows.. but it could affected the code and
    most IT departments would not allow this.
    Hope this helps,
    Kind Regards
    James Hillman
    Applications Engineer 2008 to 2009 National Instruments UK & Ireland
    Loughborough University UK - 2006 to 2011
    Remember Kudos those who help!

  • How to set permissions to edit/save files copied from a Win 7 PC

    I'm working on a project where I have to generate a series of screengrabs on a PC and transfer them to my MacPro via the network for onward tranmission via email but some need to be edited first in Photoshop.
    If I'm just forwarding them via email with no changes there's no problem, but when I need to edit them in Photoshop I can't save unless I go to Get Info for the file concerned, unlock Sharing & Permissions (which requires my administrator password) and then change the 'everyone' drop-down setting from 'Read only' to 'Read & Write', then re-lock and close Get Info.
    The default permissions for the PC files as they arrive over the network are:
    nobody     Read & Write
    staff         Read only
    everyone  Read only
    I have dozens and possibly a hundred or more of these to do, so having to re-set Permissions every time is a major pain and waste of time.
    Is there something I can change either on the Mac or the PC (which is running Windows 7) so that I can just edit and save these files without all this hassle?
    Thanks,
    Michael

    http://www.lagentesoft.com/batchmod/ drag and drop permission modification software.  Be careful with this.  If you drag and drop a necessary system folder, you can render your Mac unbootable, except with an EXTERNAL optical drive.

  • How to set permissions to a file ?

    hi,
    i have a requirement to set file permissions and also to get the current permission mode on the file. PLease let me know if there are any inbuilt functions to set permissions to a file. (eg: CHMOD in unix) .
    canRead() and canWrite() are only to get the permission. what about methods to set the permission for a file ? If there are no methods whats the possible way...
    Thanks,
    Sarat

    May be I am not sure but try this
    Runtime.getRuntime().exec("EXecute chmod command here");

  • How to set permissions on certain Webparts of the Webpart Gallery?

    Hi,
    I have a couple of webparts available in the Webpart Gallery. I do not want all those who have access to use every webpart, but only a few and some esp. not ;-)
    Is it possible to set permissions on certain webparts in the webpart gallery so that certain people cannot use them when looking for available webparts?
    Thanks
    Sven

    Hello,
    Please have a look into this link:
    http://office.microsoft.com/en-us/sharepoint-server-help/manage-and-share-web-parts-and-web-part-pages-HA010024106.aspx
    Hope the information helps!
    Thanks & Regards, Chandra Shekhar

  • How to set up imessages on 3 devices sharing the same apple id?

    i have an ipod and iphone and an ipad.  i have one apple id for all of them.  when i did the ios 5 update it asked me for my apple id to set up icloud, thus being the same for all.
    however i have encountered a problem.  when trying to set up imessages by default it uses my apple id email address. so all my devices is trying to use the SAME email address for imessages.  thats not goint to work because it will be messageing itself! HELP! it doesnt give you the option to change email addresses so what do i do???? how do i set up 3 completely different imessage accounts and still beable to sync between devices??

    Facetime only works with two devices at a time. You can have the same Apple ID, but the two devices can't have the same email address. Get a new gmail account. Normally you use wifi for connection, however, with iOS 6 and an iPad 3 you can use cellular.
    Using FaceTime http://support.apple.com/kb/ht4319
    Troubleshooting FaceTime http://support.apple.com/kb/TS3367
    The Complete Guide to FaceTime: Set-up, Use, and Troubleshooting Problems
    http://tinyurl.com/32drz3d
    I saw one post where a user said dust got inside the small microphone hole. Using a vacuum cleaner removed the dust and restored the audio.
     Cheers, Tom

  • Please can someone tell me how to set up FaceTime between 3 devices all using the same apple ID ( 2 iPads and a iPhone)????, Please can someone tell me how to set up FaceTime between 3 devices all using the same apple ID ( 2 iPads and a iPhone)????

    I am trying to set up FaceTime on all my apple devices so I can FaceTime each device but all 3 devices are using the same apple Id and I have no idea how to sort this???

    Facetime only works with two devices at a time. You can have the same Apple ID, but the two devices can't have the same email address. Get a new gmail account. Normally you use wifi for connection, however, with iOS 6 and an iPad 3 you can use cellular.
    Using FaceTime http://support.apple.com/kb/ht4319
    Troubleshooting FaceTime http://support.apple.com/kb/TS3367
    The Complete Guide to FaceTime: Set-up, Use, and Troubleshooting Problems
    http://tinyurl.com/32drz3d
    I saw one post where a user said dust got inside the small microphone hole. Using a vacuum cleaner removed the dust and restored the audio.
     Cheers, Tom

  • L_TO_CONFIRM - differences posted to 99 - how to set this stock as blocked?

    I am using fuction module L_TO_CONFIRM for some RF processing and I have been asked that where the differences are posted to 999, can this stock also be blocked so as to remove it from the view of MRP.
    I cannot see how I can do this with this function module as there is no flag to set it to blocked.
    Does anyone have any ideas?
    Regards
    Larissa Maryniuk

    Larissa,
    A useful note on top of Jurgen's.
    Potentially you can cause havoc using LI21 (Clear Differences in IM) as it will allow you to enter any Storage Type.  There is a table where you can exclude Storage Types from being used with LI21.  It makes sense to set this for all Storage Types (except 999 !).
    IMG \ LE \ WM \ Activities \ Physical Inventory \ Clear Differences (Interface to IM)
    2nd option.
    Regards,
    Nick

  • How to set Numlock on WinCE (PocketPC) device

    Does any one know how to programmatically set and reset numlock from a Personal Java application running on a WinCE hand held device.
    Thanks.

    Toolkit.getDefaultToolkit().setLockingKeyState(KeyEvent.VK_NUM_LOCK, true);

  • How to set permissions?

    Hi
    My user account got corrupted, as described here:
    https://discussions.apple.com/message/15149908#15149908
    Since I can not repair it, I created a new one. But I can not access the Apple-installed folders in my Home folder, which is on a different drive, because I "don't have permissions". How do I get them?
    When I try to repair them (which probably is not what is required anyway), the commands for verifying and repairing permissions in Disk Utility are grayed out, and the tool tip says that is because the volume is set to ignore ownership (something I did hoping to get around all this permissions stuff).
    And is there a way to get access to my mails ??
    For future use - is there a mail app which allows me to access and handle my mails just like any other file ?

    Hi again!
    Concerning the links you gave:
    1-Giving an account admin privileges:
    The newly created account is created as an admin account. It seems that not even the admin has access to other peoples Home folder.
    2-Group account:
    I would rather not fiddle with this, I'm afraid it would introduce new problems, creating a group account for 2 accounts the one of which has problems from before.
    3-mail:
    Obviously I did not make myself clear. I can access my mail server via the web browser. What I meant was: How can I get access again to the mails stored on disk on my Mac?
    BTW I discovered now that even the Desktop folder of the startup volume, when displayed in the Finder in the sidebar of a Finder window, is not accessible to me that way (no permissions). The desktop does work otherwise though.
    Sigh! Hening.
    Ups when trying to hit Reply I mistakenly awarded a Helpful Answer to myself! Hope somebody can fix this...

Maybe you are looking for

  • My ipad doesn't update

    my ipad doesn"t update what can i do?

  • Mouse problems...

    I have a MacBook Pro (15" Late 2011) with Mavericks OS, Boot Camp creating a 225 GB partition running Windows 7 Home Premium.  Download of the available drivers via BootCamp for supporting the Windows 7 on my Mac was successful.  Most functions work

  • Spry accordion - content must close on click

    Hi, I was looking for my answer on the forum but still had answers. I gave a reply but I don't know if someone wil read this (sorry if I'm incorrect). http://forums.adobe.com/message/2154232#2154232 The question is: In my test site http://www.home-ma

  • How to check the qty is available when doing stock transfer.

    I need to remain the confrimed qty while doing stock transfer. for example: Unrestricted use : 20 Sales Order       :  10 Max qty for stock transfer = 20 - 10 = 10 but not 20. How to do customizating?

  • MICR E-13B font check printing

    i want to print micr line in bottom of check. i'm using the font micr e-13b but it is printing as normal letter..any idea. Kumar