Exactly, David. Anyone can. You are able to correct permissions on registry
files to avoid somebody of registry modification (useless in my opinion),
use registry backup, "/usr/atria/etc/rgy_check" and xcleardiff to track
registry modifications. But the most effective is not to share "ClearCase
Administrator User Manual" and "ClearCase Reference Manual" to users and to
develop a kind of policy to avoid casual registry damages.
Regards,
-- Andrei Baranov (SQA CM Engineer) Motorola SPSD - St. Petersburg Office[X] General Business Use [ ] Motorola Internal Use Only [ ] Motorola Confidential Proprietary
----- Original Message ----- From: "Goodwin, David (REO)" <D.Goodwin@compaq.com> To: <cciug@rational.com> Sent: Thursday, July 19, 2001 7:43 PM Subject: [cciug] Anyone can register/unregister views and vobs ...
> > Hi All, > > I don't know if this is a known thing, but it doesn't seem to be a very good > feature... > > Using CC4.1 for Tru64 (patched up to the latest patch - 16) it seems any > user can register and views and vobs. > Regardless of whether or not they own them. > > e.g. > > $ id > uid=1171(poores) gid=3017(ct-vodafone) <- a fairly standard user.. with no > elevated privilege. > $ cleartool unregister -vob /vobstore2/Engineering_Competency.vbs > $ ct lsvob | grep Engineer > * /vobs/Engineering_Competency /vobstore2/Engineering_Competency.vbs public > $ ct lsvob -long /vobs/Engineering_Competency > Tag: /vobs/Engineering_Competency > Global path: /vobstore2/Engineering_Competency.vbs > Server host: cisvob.reo.cpqcorp.net > Access: public > Mount options: > Region: cisdev > Active: YES > Vob tag replica uuid: 247684cd.623711d4.b7a0.08:00:2b:c4:30:5b > No vob object entry exists for the vob tag "/vobs/Engineering_Competency" > > $ cleartool register -vob /vobstore2/Engineering_Competency.vbs > > $ ls -l /var/adm/atria/rgy > total 276 > drwxr-xr-x 2 root adm 8192 Apr 1 04:34 backup > -rw-r--r-- 1 root adm 102 Mar 31 14:28 bbase_object > -rw-r--r-- 1 root adm 102 Mar 31 14:27 bbase_tag > -rw-r--r-- 1 root adm 623 Apr 25 14:26 regions > -rw-r--r-- 1 root adm 7 Mar 31 14:24 rgy_hosts.conf > -rw-r--r-- 1 root adm 7 Mar 31 14:24 rgy_region.conf > -rw-r--r-- 1 root adm 7 Mar 31 14:27 rgy_svr.conf > -rw-r--r-- 1 root adm 102 Mar 31 14:28 site_config > -rw-r--r-- 1 root adm 1539 May 22 11:10 storage_path > -rw-r--r-- 1 root adm 61315 Jul 19 16:14 view_object > -rw-r--r-- 1 root adm 144248 Jul 19 14:30 view_tag > -rw-r--r-- 1 root adm 10301 Jul 19 16:31 vob_object > -rw-r--r-- 1 root adm 43487 Jul 9 14:05 vob_tag > -rw------- 1 root adm 12 Apr 2 15:03 vob_tag.sec > > $ cleartool describe -long vob:/vobs/Engineering_Competency > versioned object base "/vobs/Engineering_Competency" > created 25-Jul-00.15:16:18 by David Goodwin > (goodwind.CT-ENG@cisvob.reo.cpqcorp.net) > "David Goodwin's private vob - contains work and related stuff" > VOB family feature level: 2 > VOB storage host:pathname > "cisvob.reo.cpqcorp.net:/vobstore2/Engineering_Competency.vbs" > VOB storage global pathname "/vobstore2/Engineering_Competency.vbs" > database schema version: 53 > VOB ownership: > owner cisdmn/vobadm > group cisdmn/ct-eng > VOB holds objects from the following views: > TISWEB:C:\ccweb\goodwind\goodwind_tisweb2\view.stg [uuid > 4be3e4c3.07b64c5c.8ae8.09:bb:8a:a2:ec:36] > Attributes: > FeatureLevel = 2 > > > > > Surely it would be sensible for only the vobadm type person (or root) to > register or unregister vobs or other people's views? > > Maybe this is something that is known about, and i'm a bit late in > discovering it! > > It works on not only the registry host. I've only bothered trying it under > Tru64 5.1 at the moment. > > thanks > > David > - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - > > > > http://clearcase.rational.com/cciug/mailing_list.html >
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
This archive was generated by hypermail 2b29 : Tue Jul 31 2001 - 22:03:58 EDT