SAP Knowledge Base Article - Preview

3456888 - How to remove world writable permission for /tmp/.SQLAnywhere directory - SRS

Symptom

  • Customers concerned with World Writeable Directories in their environment that do not have the Sticky Bit set.  This may be flagged up as a potential security vulnerability by some auditors.

  • Customers may find that their HADR or SAP replication server create and use temporary files in directories that are not protected, for example under /tmp/.SQLAnywhere

    ls -al /tmp/.SQLAnywhere
    total 25488
    drwxrwxrwx  4 sybsid sapsys     4096 Apr 15 17:12 .
    drwxrwxrwx 21 root   root   26025984 Apr 15 17:13 ..
    drwxrwxrwx  5 sybsid sapsys     4096 Apr 15 17:12 sid_rep_site1_rssd
    lrwxrwxrwx  1 sybsid sapsys       36 Apr 15 17:12 __SQLAny__ -> /tmp/.SQLAnywhere/sid_rep_site1_rssd


Read more...

Environment

  • SAP replication server on unix / linux platform

Product

SAP Adaptive Server Enterprise all versions ; SAP Replication Server 16.0 ; SAP Replication Server 16.1

Keywords

/tmp/.SQLAnywhere , World Writeable, 777 , KBA , BC-SYB-REP-SAP , Replication with SAP Suite / SAP BW , BC-SYB-REP , Sybase Replication Server (standalone) , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.