Why isn my ual world readable?
The apc command does a `chmod 640′ on the ual it generates after a successful link. This is necessary because this effects how the shared module is loaded at run-time. Here’s an excerpt from AIX ‘info’ output for ‘dlopen()’, which is the runtime routine used to load UALs when running aprobe: • If the module being loaded has read-other permission, the module is loaded into the global shared library segment. Modules loaded into the global shared library segment are not unloaded even if they are no longer being used. Use the slibclean command to remove unused modules from the global shared library segment. It seems obvious that we don’t want individual’s uals the shared library segment. Multiple edit/apc/aprobe cycles could result in bizarre behavior. The slibclean command can only be run by an account with su privileges.
