<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helv;
panose-1:2 11 6 4 2 2 2 3 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"IBM Plex Sans";
panose-1:2 11 5 3 5 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"IBM Plex Sans",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif">What I have found is that the user running “df” against a given file system must have execute permissions on every directory from the parent directory of the mount point
all the way back to /<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif">e.g.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif">For file system mounted at /really/long/path/mountpoint<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif">All directories leading up to it…<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif">/really/long/path<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif">/really/long<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif">/really<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif">/<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif">…must have +x permissions.
<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif">Whether you do that at owner, group, or other permissions is a determination you’re going to have to make for yourself. You could add the
xymon user to the group assigned to those directories, but if the group has write access to those directories, that could be a security liability for your database. You could do it on “other” permissions, but that would give everyone with access to your system
execute access to those directories, giving them the ability to “cd” into them. That may or may not be a problem for you. The third option would be to look into whether your system supports ACLs and through those give just the xymon user +x permissions to
just those directories. Were it me doing it, that would be my preference.<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif;color:black">Erik D. Schminke | Associate Systems Programmer<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif;color:black">Hormel Foods Corporation | One Hormel Place | Austin, MN 55912<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif;color:black">Phone: (507) 434-6817<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif;color:black">edschminke@hormel.com | www.hormelfoods.com<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"IBM Plex Sans",sans-serif;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>