Need informationon nobody user capabilities

[kamit28]

Hi all,

The OS I am using is Solaris 9 on a Sun-Fire-V890 machine.
I have a shell script that runs through Control-M schedular. When it
runs, it is assigned user = nobody and group = nobody.

I have a directory "webdir" and a subdirectory of webdir "model" with
following permissions:

drwxrwxrwx 3 amit dba 512 May 5 06:02 webdir

drwxr--r-- 2 amit dba 512 May 5 06:02 model

Now, the shell script is written to delete old files from "webdir/
model" dir and create new files. Can the script run as nobody user and
create / delete files from "webdir/model" directory with current
permissions on "model" directory in place or I must give write
permissions to "other" o+w on model diredctory?

I can't test it on my end because I do not have rights to schedule a
job in Comtrol-M :(

I also need to know the capabilities of "nobody" user account, as how
it is different from normal unix user accounts, what it can do and
what It can't do.
I tried google, but information I got was not very clear.

Please help me out.

Thanks & Regards,
Amit

[Barry Margolin]

In article
<421aa7d5-65c9-4178...@m24g2000vbp.googlegroups.com>,
kamit28 <kam...@gmail.com> wrote:

> Hi all,
>
> The OS I am using is Solaris 9 on a Sun-Fire-V890 machine.
> I have a shell script that runs through Control-M schedular. When it
> runs, it is assigned user = nobody and group = nobody.
>
> I have a directory "webdir" and a subdirectory of webdir "model" with
> following permissions:
>
> drwxrwxrwx 3 amit dba 512 May 5 06:02 webdir
>
> drwxr--r-- 2 amit dba 512 May 5 06:02 model
>
> Now, the shell script is written to delete old files from "webdir/
> model" dir and create new files. Can the script run as nobody user and
> create / delete files from "webdir/model" directory with current
> permissions on "model" directory in place or I must give write
> permissions to "other" o+w on model diredctory?

The above permissions only allow the user amit to create or delete files
in webdir/model. Everyone else only has read permission, which means
they can list the subdirectory, but not access any of the files in it.

> I can't test it on my end because I do not have rights to schedule a
> job in Comtrol-M :(

Just login with any account other than amit, and you'll have the same
access to this directory as "nobody".

>
> I also need to know the capabilities of "nobody" user account, as how
> it is different from normal unix user accounts, what it can do and
> what It can't do.

It's not different from normal unix accounts. The only thing "special"
about it is that it's distinct from all the other Unix accounts, and
usually doesn't have any files of its own. It's simply a convenient
account to use when you want an account that doesn't have special access.

--
Barry Margolin, bar...@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
*** PLEASE don't copy me on replies, I'll read them in the group ***