Start a Conversation

Unsolved

4 Posts

38

November 15th, 2023 19:31

IOCA check fails

FAIL: Checks have identified permission issues on /ifs/.ifsvar directory that is required for update / upgrade and installation processes, 
expected permissions for this directory should be at least 770 with Synthetic ACL and owner/group of root:wheel.

How do I change  CONTROL:dacl_auto_inherited to SYNTHETIC ACL?

fdwois-1# cd /ifs/.ifsvar
fdwois-1# ls -led
drwxrwx--- +   30 root  wheel  2195 Nov  8 16:50 .
 OWNER: user:root
 GROUP: group:wheel
 CONTROL:dacl_auto_inherited
 0: user:root allow dir_gen_read,dir_gen_write,dir_gen_execute,std_write_dac,delete_child
 1: group:wheel allow dir_gen_read,dir_gen_write,dir_gen_execute,delete_child

Moderator

 • 

8.4K Posts

November 16th, 2023 14:26

Hi,

Thanks for your question.

Try this.

https://dell.to/3QKblnm

-Adding "- b" option would apply the synthetic permission to the directory

Cluster-1# chmod -b 770 .ssh

 

If that doesn’t work.

1. Backup ACLs and mode bits & flags, just in case.

find /ifs/.ifsvar -print | xargs ls -led > /ifs/data/Isilon_Support/ifsvarACLs

find /ifs/.ifsvar -print | xargs stat -f "%p %Sf %ST %Su %Sg %N " > /ifs/data/Isilon_Support/ifsvarModeflag

2. Create mode bits file

find /ifs/.ifsvar -print | xargs stat -f "%Lp %N" > /ifs/data/Isilon_Support/ifsvarmode

3. Replace ACL with mode bits:

while read mod file;do echo -n "setting $mod on $file <<<< "; cmd="chmod -b $mod $file";echo $cmd;eval $cmd;done < /ifs/data/Isilon_Support/ifsvarmode


Confirm /ifs/.ifsvar has been changed to default permissions. Then you can go ahead with the original task.

# ls -led /ifs/.ifsvar

 

 

 

Let us know if you have any additional questions.

No Events found!

Top