Depending on your site and environment requirements, you can configure mount parameters for CA CSM product, software catalog, temporary, and deployment file systems. For example, you can decide whether to perform security checks, or how to proceed when the system that owns a file system goes down.
Initially, CA CSM uses the default values of these parameters. You can override the defaults.
Follow these steps:
IJO="$IJO -DADD_MOUNT_DEFAULT_OPTIONS=SETUID|NOSETUID,SECURITY|NOSECURITY, AUTOMOVE|NOAUTOMOVE|UNMOUNT"
Specifies whether the setuid() and setgid() mode bit is supported.
Supports the setuid() and setgid() mode bit on an executable file. This option is the default.
Disables the setuid() and setgid() mode bit support on an executable file. When the program is executed, the UID or GID are not changed, and the APF and Program Control extended attributes are not honored. The entire HFS is uncontrolled.
Specifies whether to perform the UNIX permissions checks.
Enables the UNIX permissions checks. This option is the default.
Disables the UNIX permissions checks. Any new files or directories that are created are assigned an owner of UID(0), no matter what UID issued the request. A user can access or change any file or directory.
For a sysplex where systems participate in a shared file system, specifies how to proceed when the system that owns a file system goes down.
Automatically changes ownership of the file system to another system that participates in a shared file system. This option is the default.
Keeps ownership of the file system. As a result, the file system becomes inaccessible.
Unmounts the file system when the node leaves the sysplex.
Note: For more information about these options, see the following books:
The mount parameters take effect.
To restore the defaults, leave the parameters empty, or comment out the line in the RunTimeMVSHLQPrefix.SAMPLIB(MSMLIB) member.
Example
This example enables setuid() and setgid() mode bit on executable files, disables security checks, and does not allow file systems to change ownership:
IJO="$IJO -DADD_MOUNT_DEFAULT_OPTIONS=NOSECURITY,NOAUTOMOVE"
|
Copyright © 2015 CA Technologies.
All rights reserved.
|
|