Smarts NCM: Can we change the SETUID bit on the cgi files?

Products

• VMware Smart Assurance

Issue/Introduction

Symptoms:

SETUID bit is set on the following Smarts NCM files, and owner is root:

-rwsr-x---   1 root     voyence  4174880 Sep 27 17:41 /opt/voyence/bin/sysmon

-rwsr-x---   1 root     voyence  6673808 Sep 27 17:41 /opt/voyence/cgi-bin/setupmgr.cgi

-rwsr-x---   1 root     voyence  1661400 Sep 27 17:41 /opt/voyence/cgi-bin/cflist.cgi

-rwsr-x---   1 root     voyence  2216392 Sep 27 17:41 /opt/voyence/cgi-bin/cfgetidx.cgi

-rwsr-x---   1 root     voyence  1887664 Sep 27 17:41 /opt/voyence/cgi-bin/cfwrite.cgi

 

 

Is the SETUID bit necessary for Smarts NCM? Can the SETUID bit be removed or the ownership of these files be moved to another user?

Environment

VMware Smart Assurance - NCM

Cause

 

 

 

Resolution

These binaries are executed by httpd (apache user, non-root) and they are required to have root privileges to access infraDb information. Therefore, the SETUID bit has to be set. EMC strongly recommends that you not change these permissions as it will alter the functionality of the Smarts NCM product in unpredictable ways.