Unsolved
1 Rookie
•
5 Posts
0
96
IOCA check fails
FAIL: Checks have identified permission issues on /ifs/.ifsvar directory that is required for update / upgrade and installation processes,
expected permissions for this directory should be at least 770 with Synthetic ACL and owner/group of root:wheel.
How do I change CONTROL:dacl_auto_inherited to SYNTHETIC ACL?
fdwois-1# cd /ifs/.ifsvar
fdwois-1# ls -led
drwxrwx--- + 30 root wheel 2195 Nov 8 16:50 .
OWNER: user:root
GROUP: group:wheel
CONTROL:dacl_auto_inherited
0: user:root allow dir_gen_read,dir_gen_write,dir_gen_execute,std_write_dac,delete_child
1: group:wheel allow dir_gen_read,dir_gen_write,dir_gen_execute,delete_child
DELL-Josh Cr
Moderator
Moderator
•
8.6K Posts
0
November 16th, 2023 14:26
Hi,
Thanks for your question.
Try this.
https://dell.to/3QKblnm
-Adding "- b" option would apply the synthetic permission to the directory
Cluster-1# chmod -b 770 .ssh
If that doesn’t work.
1. Backup ACLs and mode bits & flags, just in case.
find /ifs/.ifsvar -print | xargs ls -led > /ifs/data/Isilon_Support/ifsvarACLs
find /ifs/.ifsvar -print | xargs stat -f "%p %Sf %ST %Su %Sg %N " > /ifs/data/Isilon_Support/ifsvarModeflag
2. Create mode bits file
find /ifs/.ifsvar -print | xargs stat -f "%Lp %N" > /ifs/data/Isilon_Support/ifsvarmode
3. Replace ACL with mode bits:
while read mod file;do echo -n "setting $mod on $file <<<< "; cmd="chmod -b $mod $file";echo $cmd;eval $cmd;done < /ifs/data/Isilon_Support/ifsvarmode
Confirm /ifs/.ifsvar has been changed to default permissions. Then you can go ahead with the original task.
# ls -led /ifs/.ifsvar
Let us know if you have any additional questions.