>An administrator for a Unix ADSM client came to me today with an odd request.
>He has reason to believe that permissions on large numbers of files have been
>altered, but thinks the contents of the files are intact. He wanted to know
>whether there is a way to get information about permission bits and possibly
>ACL's from the ADSM server without restoring the files. Something like 90,000
>files are involved, so restoring to /tmp and looking at the permissions is not
>an attractive option.
Thomas - You definitely cannot get that info from the ADSM server: file
attributes are not available to the ADSM admin via any commands.
The client is able to get some attributes, but not permission bits, from
what I've seen.
There is another approach, which your Unix admin should know about:
whenever file attributes are changed in Unix, the ctime stamp is changed, while
the atime and mtime remain intact. An 'ls -alc ...' will reveal the
ctime values of those files. If all have the same ctime, then it looks
mightily like a chmod or the equivalent was done.
Richard Sims, BU
