hole in security

Hi,

I’ve reported previously the first part of this post, but the second part is very interested. I use
standard QNX RTP 6.1 except I’ve added the renice command in the ph script. I have got “Welcome”
window, then I fill in the phlogin’s fields (log in as an ordinary user). Click on “Terminal” in
shelf and:
$ pidin |grep devi-hirun
299034 2 ton/bin/devi-hirun 10o …
299034 3 ton/bin/devi-hirun 10o …
299034 4 ton/bin/devi-hirun 12o …
(renice in ph script does not work)
$ renice -1 -p 299034
SchedSet on pid.tid 299034.2: Operation not permitted
SchedSet on pid.tid 299034.3: Operation not permitted
SchedSet on pid.tid 299034.4: Operation not permitted
$ phshutdown
Then select “Exit to text mode” and click OK. I see at console the same message during startup as
above for renice fails.
login: ed1k
Password:
$ ph
Click on “Terminal” in shelf and:
$ slay -p devi-hirun
843805
$ renice -2 -p 843805
$ pidin |grep devi-hirun
843805 2 ton/bin/devi-hirun 28o …
843805 3 ton/bin/devi-hirun 28o …
843805 4 ton/bin/devi-hirun 30o …
So, renice in ph script does work (it’s good) and renice does work from terminal for ordinary user
(it isn’t good).
As a sysadmin of my home PC:
1/ I WANT to be able to adjust the process priority by start up script.
2/ I DO NOT WANT the any driver is able to be reniced by any user.

Thank you.
Best regards,
Eduard.

Hi Eduard,

I am sending this to our tools support guys. They will know what to do :slight_smile:

E.


ed1k <ed1k@yahoo.com> wrote:

Hi,

I’ve reported previously the first part of this post, but the second part is very interested. I use
standard QNX RTP 6.1 except I’ve added the renice command in the ph script. I have got “Welcome”
window, then I fill in the phlogin’s fields (log in as an ordinary user). Click on “Terminal” in
shelf and:
$ pidin |grep devi-hirun
299034 2 ton/bin/devi-hirun 10o …
299034 3 ton/bin/devi-hirun 10o …
299034 4 ton/bin/devi-hirun 12o …
(renice in ph script does not work)
$ renice -1 -p 299034
SchedSet on pid.tid 299034.2: Operation not permitted
SchedSet on pid.tid 299034.3: Operation not permitted
SchedSet on pid.tid 299034.4: Operation not permitted
$ phshutdown
Then select “Exit to text mode” and click OK. I see at console the same message during startup as
above for renice fails.
login: ed1k
Password:
$ ph
Click on “Terminal” in shelf and:
$ slay -p devi-hirun
843805
$ renice -2 -p 843805
$ pidin |grep devi-hirun
843805 2 ton/bin/devi-hirun 28o …
843805 3 ton/bin/devi-hirun 28o …
843805 4 ton/bin/devi-hirun 30o …
So, renice in ph script does work (it’s good) and renice does work from terminal for ordinary user
(it isn’t good).
As a sysadmin of my home PC:
1/ I WANT to be able to adjust the process priority by start up script.
2/ I DO NOT WANT the any driver is able to be reniced by any user.

Thank you.
Best regards,
Eduard.