...
Strategy will be to only install packages if absolutely necessary to minimise need to vet new packages.
Root privileges will only be used when absolutely necessary.
Principal of Least Privilege
When run with the 'Dependency Mode Check' enabled '-D', the Opmantek Installer cannot be run as root.
Should you want to run the Opmantek Installer with least privileges you may need to create a user with least privileges.
The Opmantek Installer does not take least privileges to extremes and leaves it in the hands of the person installing to run the Installer with least privileges.
This is important as, for example, by default the nmis user has 0770 permissions on the nmis directory, and a user in the nmis directory will have write and execute permissions on the nmis directory.
Run the following one-liner bash script to check your permissions on the nmis and omk directories if they exists, were you to run the installer as yourself:
| Code Block |
|---|
NMIS=/usr/local/nmis9;OMK=/usr/local/omk;[ -x "$NMIS" ] && echo "Has execute permissions: $NMIS";[ -w "$NMIS" ] && echo "Has write permissions: $NMIS";[ -w "$OMK" ] && echo "Has write permissions: $OMK" |
Centos 7 Example
On Redhat and Centos OS, tar and libnsl may need to be installed as they are needed to unpack the installer runfile.
...