To modify the owner and permissions of a RAC resource by using Crs_setperm

In an Oracle RAC cluster, there are also issues with owners and permissions for the management of various resources. Crs_getperm and crs_setperm are such a pair of commands, mainly used to view and modify resource in the cluster owner,group and permissions, and so on, the following specific demonstration to get its use.

[Python]View PlainCopyprint?

2. 1. View resources in the current cluster
4. #下面的查询可知, there are two service in the current cluster environment
6. [Email protected]:~> crs_stat-ls | grep SRV
8. Ora .... O4a.srv Oracle Oinstall rwxrwxr--
10. Ora .... 0g1.srv Oracle Oinstall rwxrwxr--
14. #获得service的全称
16. [Email protected]:~> crs_stat-p | grep SRV
18. Name=ora. GOBO4. Gobo4_srv. Gobo4a.srv
20. Name=ora.ora10g.hr_ora10g.ora10g1.srv
22. Description=ora.ora10g.hr_ora10g.ora10g1.srv
26. #下面通过crs_getperm获得资源的所有者即权限
28. [Email protected]:~> crs_getperm ora.ora10g.hr_ora10g.ora10g1.srv
30. Name:ora.ora10g.hr_ora10g.ora10g1.srv
32. Owner:oracle:rwx,pgrp:oinstall:rwx,other::r--,
34. #上面owner即为所有者, Pgrp represents the owner, and other is the other user, each followed by its corresponding permissions
38. 2. Usage of crs_getperm and crs_setperm
42. [Email protected]:~> crs_getperm-h
44. Usage:crs_getperm resource_name [-u user|-g Group] [-Q]
46. #crs_getperm用法较为简单, followed by the resource name, optional for the user or group
50. [Email protected]:~> crs_setperm-h #此命令稍微较crs_getperm复杂
52. Usage:crs_setperm resource_name-u aclstring [-Q]
54. Crs_setperm resource_name-x aclstring [-Q]
56. Crs_setperm resource_name-o user_name [-Q]
58. Crs_setperm resource_name-g group_name [-Q]
62. -U Update the ACL string
64. -X Delete the ACL string
66. -O Change the owner of the resource
68. -G Change the primary group of the resource
72. Aclstring is one of the following:
74. User:<username>:rwx
76. Group:<groupname>:r-x #当心这里的group用法, you will receive an error message if you modify permissions directly using Group
78. other::r--
82. 3. Demo using Crs_setperm
84. [Email protected]:~> su
86. Password:
88. #下面分别修改资源hr_ora10g的资源所有者和所属组, change all of them to Roo permissions
90. Bo2dbp:/users/oracle # crs_setperm Ora.ora10g.hr_ora10g.ora10g1.srv-o Root
92. Bo2dbp:/users/oracle # crs_setperm ora.ora10g.hr_ora10g.ora10g1.srv-g Root
96. #查看修改之后, the owner and genus of the resource have changed
98. Bo2dbp:/users/oracle # crs_getperm Ora.ora10g.hr_ora10g.ora10g1.srv
100. Name:ora.ora10g.hr_ora10g.ora10g1.srv
102. Owner:root:rwx,pgrp:root:rwx,other::r--,
106. #修改属组的权限, change it to read, execute
108. Bo2dbp:/users/oracle # crs_setperm ora.ora10g.hr_ora10g.ora10g1.srv-u pgrp:root:r-x
110. Bo2dbp:/users/oracle # crs_getperm Ora.ora10g.hr_ora10g.ora10g1.srv
112. Name:ora.ora10g.hr_ora10g.ora10g1.srv
114. Owner:root:rwx,pgrp:root:r-x,other::r--,
118. #使用同样的方式将其修改回去.
120. Bo2dbp:/users/oracle # crs_setperm Ora.ora10g.hr_ora10g.ora10g1.srv-o Oracle
122. Bo2dbp:/users/oracle # crs_setperm ora.ora10g.hr_ora10g.ora10g1.srv-g oinstall
124. Bo2dbp:/users/oracle # crs_setperm ora.ora10g.hr_ora10g.ora10g1.srv-u pgrp:oinstall:rwx
128. Bo2dbp:/users/oracle # crs_getperm Ora.ora10g.hr_ora10g.ora10g1.srv
130. Name:ora.ora10g.hr_ora10g.ora10g1.srv
132. Owner:oracle:rwx,pgrp:oinstall:rwx,other::r--,
136. Bo2dbp:/users/oracle # su-oracle
138. #所有者的权限不允许修改
140. [Email protected]:~> crs_setperm ora.ora10g.hr_ora10g.ora10g1.srv-u owner:oracle:r-x
142. crs-0248:acl operation failed
146. [Email protected]:~> crs_setperm ora.ora10g.hr_ora10g.ora10g1.srv-u owner:oracle:rw-
148. crs-0248:acl operation failed
152. [Email protected]:~> crs_setperm ora.ora10g.hr_ora10g.ora10g1.srv-u owner:oracle:-wx
154. crs-0248:acl operation failed
158. #组权限可以修改
160. [Email protected]:~> crs_setperm ora.ora10g.hr_ora10g.ora10g1.srv-u pgrp:oinstall:r-x
164. [Email protected]:~> crs_getperm ora.ora10g.hr_ora10g.ora10g1.srv
166. Name:ora.ora10g.hr_ora10g.ora10g1.srv
168. Owner:oracle:rwx,pgrp:oinstall:r-x,other::r--,
172. #other也可以修改
174. [Email protected]:~> crs_setperm ora.ora10g.hr_ora10g.ora10g1.srv-u other::rwx
176. [Email protected]:~> crs_getperm ora.ora10g.hr_ora10g.ora10g1.srv
178. Name:ora.ora10g.hr_ora10g.ora10g1.srv
180. OWNER:ORACLE:RWX,PGRP:OINSTALL:R-X,OTHER::RWX,
184. #Author: Robinson
186. #Blog: http://blog.csdn.net/robinson_0612
188. #根据下面的查看结果可知, changes have been made and it is recommended to change it to the original state
190. [Email protected]:~> crs_stat-ls |grep SRV
192. Ora .... O4a.srv Oracle Oinstall rwxrwxr--
194. Ora .... 0g1.srv Oracle Oinstall rwxr-xrwx
196. Ext.: http://blog.csdn.net/leshami/article/details/8219242

To modify the owner and permissions of a RAC resource by using Crs_setperm