exec_attr.txt revision 42d159821800ff240cc201c8fe07f575b9e8a62b
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest#
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# CDDL HEADER START
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest#
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# The contents of this file are subject to the terms of the
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# Common Development and Distribution License (the "License").
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# You may not use this file except in compliance with the License.
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest#
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# or http://www.opensolaris.org/os/licensing.
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# See the License for the specific language governing permissions
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# and limitations under the License.
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest#
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# When distributing Covered Code, include this CDDL HEADER in each
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# If applicable, add the following below this CDDL HEADER, with the
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# fields enclosed by brackets "[]" replaced with your own identifying
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# information: Portions Copyright [yyyy] [name of copyright owner]
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest#
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# CDDL HEADER END
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest#
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# Copyright 2010 Sun Microsystems, Inc. All rights reserved.
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# Use is subject to license terms.
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest#
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# /etc/security/exec_attr
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest#
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest# execution attributes for profiles. see exec_attr(4)
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest#
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest#
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestAll:suser:cmd:::*:
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestAudit Control:suser:cmd:::/etc/security/bsmconv:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestAudit Control:suser:cmd:::/etc/security/bsmunconv:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestAudit Control:solaris:cmd:::/usr/sbin/audit:privs=sys_audit,file_dac_read,proc_owner
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestAudit Control:suser:cmd:::/usr/sbin/audit:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestAudit Control:suser:cmd:::/usr/sbin/auditconfig:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestAudit Control:suser:cmd:::/usr/sbin/auditd:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestAudit Review:suser:cmd:::/usr/sbin/auditreduce:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestAudit Review:suser:cmd:::/usr/sbin/auditstat:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestAudit Review:suser:cmd:::/usr/sbin/praudit:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestContract Observer:solaris:cmd:::/usr/bin/ctwatch:\
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest privs=contract_event,contract_observer
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestCron Management:suser:cmd:::/usr/bin/crontab:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestCrypto Management:suser:cmd:::/usr/sbin/cryptoadm:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestCrypto Management:suser:cmd:::/usr/bin/kmfcfg:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestCrypto Management:suser:cmd:::/usr/sfw/bin/openssl:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestCrypto Management:suser:cmd:::/usr/sfw/bin/CA.pl:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDHCP Management:suser:cmd:::/usr/lib/inet/dhcp/svcadm/dhcpconfig:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDHCP Management:suser:cmd:::/usr/lib/inet/dhcp/svcadm/dhtadm:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDHCP Management:suser:cmd:::/usr/lib/inet/dhcp/svcadm/pntadm:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Management:suser:cmd:::/usr/sbin/allocate:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Management:suser:cmd:::/usr/sbin/add_drv:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Management:suser:cmd:::/usr/sbin/deallocate:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Management:suser:cmd:::/usr/sbin/rem_drv:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Management:suser:cmd:::/usr/sbin/update_drv:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Security:suser:cmd:::/usr/sbin/add_drv:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Security:suser:cmd:::/usr/sbin/devfsadm:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Security:suser:cmd:::/usr/sbin/eeprom:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Security:solaris:cmd:::/usr/bin/kbd:uid=0;gid=sys
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Security:suser:cmd:::/usr/sbin/list_devices:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Security:suser:cmd:::/usr/sbin/rem_drv:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Security:suser:cmd:::/usr/sbin/strace:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Security:suser:cmd:::/usr/sbin/update_drv:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Security:suser:cmd:::/usr/sbin/add_allocatable:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestDevice Security:suser:cmd:::/usr/sbin/remove_allocatable:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFTP Management:suser:cmd:::/usr/sbin/ftpaddhost:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFTP Management:suser:cmd:::/usr/sbin/ftpconfig:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFTP Management:suser:cmd:::/usr/sbin/ftprestart:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFTP Management:suser:cmd:::/usr/sbin/ftpshut:euid=0;egid=sys
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFTP Management:suser:cmd:::/usr/sbin/privatepw:uid=0;egid=sys
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:solaris:cmd:::/sbin/mount:privs=sys_mount
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:solaris:cmd:::/sbin/umount:privs=sys_mount
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/bin/eject:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/bin/mkdir:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/bin/rmdir:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/lib/autofs/automountd:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/lib/fs/autofs/automount:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/lib/fs/nfs/showmount:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/lib/fs/ufs/fsirand:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/lib/fs/ufs/newfs:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/lib/fs/ufs/tunefs:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/clri:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/devinfo:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/dfmounts:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/dfshares:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/ff:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/format:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/fsck:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/fsdb:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/fstyp:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/fuser:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:solaris:cmd:::/usr/sbin/iscsiadm:euid=0;privs=basic
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/mkfile:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/mkfs:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/mount:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/mountall:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:solaris:cmd:::/usr/sbin/mpathadm:privs=sys_devices
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:solaris:cmd:::/usr/sbin/quotacheck:uid=0;gid=sys
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:solaris:cmd:::/usr/sbin/quotaoff:uid=0;gid=sys
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:solaris:cmd:::/usr/sbin/quotaon:uid=0;gid=sys
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:solaris:cmd:::/usr/sbin/raidctl:privs=sys_config,sys_devices;euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/ramdiskadm:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:solaris:cmd:::/usr/sbin/sasinfo:privs=sys_devices
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:solaris:cmd:::/usr/sbin/sbdadm:privs=sys_devices
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/share:uid=0;gid=root
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/sharemgr:uid=0;gid=root
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/shareall:uid=0;gid=root
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:solaris:cmd:::/usr/sbin/stmfadm:privs=sys_devices
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/swap:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/umount:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/umountall:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/unshare:uid=0;gid=root
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestFile System Management:suser:cmd:::/usr/sbin/unshareall:uid=0;gid=root
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestIP Filter Management:solaris:cmd:::/usr/sbin/ipf:privs=sys_ip_config
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestIP Filter Management:solaris:cmd:::/usr/sbin/ipfs:privs=sys_ip_config
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestIP Filter Management:solaris:cmd:::/usr/sbin/ipmon:privs=sys_ip_config
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestIP Filter Management:solaris:cmd:::/usr/sbin/ipfstat:privs=sys_ip_config;gid=sys
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestIP Filter Management:solaris:cmd:::/usr/sbin/ipnat:privs=sys_ip_config;gid=sys
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestIP Filter Management:solaris:cmd:::/usr/sbin/ippool:privs=sys_ip_config;gid=sys
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestKerberos Server Management:solaris:cmd:::/usr/lib/krb5/krb5kdc:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestKerberos Server Management:solaris:cmd:::/usr/lib/krb5/kadmind:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestKerberos Server Management:solaris:cmd:::/usr/lib/krb5/kprop:euid=0;privs=none
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestKerberos Server Management:solaris:cmd:::/usr/sbin/kadmin.local:euid=0;privs=none
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestKerberos Server Management:solaris:cmd:::/usr/sbin/kdb5_util:euid=0;privs=none
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestKerberos Server Management:solaris:cmd:::/usr/sbin/kdb5_ldap_util:euid=0;privs=none
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestKerberos Server Management:solaris:cmd:::/usr/sbin/kdcmgr:euid=0;privs=none
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestKerberos Client Management:solaris:cmd:::/usr/bin/klist:euid=0;privs=file_dac_read
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestKerberos Client Management:solaris:cmd:::/usr/sbin/kadmin:euid=0;privs=none
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestKerberos Client Management:solaris:cmd:::/usr/sbin/kclient:euid=0;privs=none
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestLog Management:suser:cmd:::/usr/sbin/logadm:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMail Management:suser:cmd:::/usr/lib/sendmail:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMail Management:suser:cmd:::/usr/sbin/editmap:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMail Management:suser:cmd:::/usr/sbin/makemap:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMail Management:suser:cmd:::/usr/sbin/newaliases:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:solaris:cmd:::/usr/bin/mdb:privs=all
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:suser:cmd:::/usr/bin/mdb:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:solaris:cmd:::/usr/bin/coreadm:euid=0;privs=proc_owner
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:suser:cmd:::/usr/bin/date:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:suser:cmd:::/usr/bin/ldd:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:suser:cmd:::/usr/bin/vmstat:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:suser:cmd:::/usr/sbin/eeprom:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:suser:cmd:::/usr/sbin/halt:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:suser:cmd:::/sbin/init:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:solaris:cmd:::/usr/sbin/pcitool:privs=all
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:suser:cmd:::/usr/sbin/poweroff:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:suser:cmd:::/usr/sbin/prtconf:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:suser:cmd:::/usr/sbin/reboot:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:suser:cmd:::/usr/sbin/syslogd:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:suser:cmd:::/sbin/bootadm:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMaintenance and Repair:solaris:cmd:::/usr/sbin/ucodeadm:privs=all
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMedia Backup:suser:cmd:::/usr/bin/mt:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMedia Backup:suser:cmd:::/usr/lib/fs/ufs/ufsdump:euid=0;gid=sys
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMedia Backup:suser:cmd:::/usr/sbin/tar:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMedia Catalog:solaris:cmd:::/usr/bin/bart:\
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest privs=file_dac_read,file_dac_search
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMedia Restore:suser:cmd:::/usr/bin/cpio:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMedia Restore:suser:cmd:::/usr/bin/mt:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMedia Restore:suser:cmd:::/usr/lib/fs/ufs/ufsrestore:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMedia Restore:suser:cmd:::/usr/sbin/tar:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMMS Administrator:solaris:cmd:::/usr/bin/mmsinit:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMMS Administrator:solaris:cmd:::/usr/bin/mmsadm:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMMS Operator:solaris:cmd:::/usr/bin/mmsadm:uid=0;privs=file_dac_read
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestMMS User:solaris:cmd:::/usr/bin/mmsmnt:uid=0;privs=file_dac_read
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestName Service Management:suser:cmd:::/usr/sbin/nscd:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestName Service Security:suser:cmd:::/usr/bin/chkey:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestName Service Security:suser:cmd:::/usr/sbin/ldapclient:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestName Service Security:suser:cmd:::/usr/sbin/newkey:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:solaris:cmd:::/sbin/ifconfig:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:solaris:cmd:::/sbin/route:privs=sys_ip_config
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:solaris:cmd:::/sbin/routeadm:euid=0;\
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest privs=proc_chroot,proc_owner,sys_ip_config
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:solaris:cmd:::/sbin/dladm:euid=dladm;egid=netadm;\
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest privs=sys_dl_config,net_rawaccess,proc_audit
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:solaris:cmd:::/sbin/dlstat:euid=dladm;egid=sys;
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:solaris:cmd:::/sbin/flowadm:euid=dladm;egid=sys;\
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest privs=sys_dl_config,net_rawaccess,proc_audit
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:solaris:cmd:::/sbin/flowstat:euid=dladm;egid=sys;
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:solaris:cmd:::/sbin/ipadm:euid=netadm;egid=netadm;\
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest privs=sys_ip_config,net_rawaccess
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:suser:cmd:::/usr/bin/netstat:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:suser:cmd:::/usr/bin/rup:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:suser:cmd:::/usr/bin/ruptime:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:suser:cmd:::/usr/bin/setuname:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:suser:cmd:::/usr/sbin/asppp2pppd:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:suser:cmd:::/usr/sbin/ifconfig:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:suser:cmd:::/usr/sbin/ipaddrsel:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:suser:cmd:::/usr/sbin/ipqosconf:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:suser:cmd:::/usr/sbin/rndc:privs=file_dac_read
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:suser:cmd:::/usr/sbin/route:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:suser:cmd:::/usr/sbin/snoop:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:solaris:cmd:::/usr/sbin/snoop:privs=net_observability
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Management:suser:cmd:::/usr/sbin/spray:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Observability:solaris:cmd:::/usr/sbin/snoop:privs=net_observability
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Link Security:solaris:cmd:::/sbin/dladm:euid=dladm;egid=sys;\
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew Forrest privs=sys_dl_config,net_rawaccess,proc_audit
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Link Security:solaris:cmd:::/sbin/dlstat:euid=dladm;egid=sys;
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:solaris:cmd:::/usr/lib/inet/certdb:euid=0;privs=none
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:solaris:cmd:::/usr/lib/inet/certlocal:euid=0;privs=none
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:solaris:cmd:::/usr/lib/inet/certrldb:euid=0;privs=none
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:solaris:cmd:::/usr/lib/inet/in.iked:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:solaris:cmd:::/usr/sbin/ikeadm:euid=0;privs=file_dac_write
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:solaris:cmd:::/usr/sbin/ikecert:euid=0;privs=none
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:solaris:cmd:::/usr/sbin/ipsecconf:euid=0;privs=sys_ip_config
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:solaris:cmd:::/usr/sbin/ipseckey:uid=0;privs=sys_ip_config
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:solaris:cmd:::/usr/sbin/ipsecalgs:privs=sys_ip_config
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:suser:cmd:::/usr/lib/inet/certdb:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:suser:cmd:::/usr/lib/inet/certlocal:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:suser:cmd:::/usr/lib/inet/certrldb:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:suser:cmd:::/usr/lib/inet/in.iked:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:suser:cmd:::/usr/sbin/ikeadm:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:suser:cmd:::/usr/sbin/ikecert:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:suser:cmd:::/usr/sbin/ipsecconf:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:suser:cmd:::/usr/sbin/ipseckey:uid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork IPsec Management:suser:cmd:::/usr/sbin/ipsecalgs:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Security:solaris:cmd:::/usr/sbin/ksslcfg:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestNetwork Security:suser:cmd:::/usr/bin/ssh-keygen:uid=0;gid=sys
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestObject Access Management:solaris:cmd:::/usr/bin/chgrp:privs=file_chown
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestObject Access Management:solaris:cmd:::/usr/bin/chmod:privs=file_owner
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestObject Access Management:solaris:cmd:::/usr/bin/chown:privs=file_chown
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestObject Access Management:solaris:cmd:::/usr/bin/setfacl:privs=file_owner
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestObject Access Management:suser:cmd:::/usr/bin/chgrp:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestObject Access Management:suser:cmd:::/usr/bin/chmod:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestObject Access Management:suser:cmd:::/usr/bin/chown:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestObject Access Management:suser:cmd:::/usr/bin/getfacl:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestObject Access Management:suser:cmd:::/usr/bin/setfacl:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestPrimary Administrator:solaris:cmd:::*:uid=0;gid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestPrinter Management:suser:cmd:::/usr/lib/lp/local/lpadmin:uid=lp;gid=lp
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestPrinter Management:suser:cmd:::/usr/sbin/lpfilter:euid=lp;uid=lp
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestPrinter Management:suser:cmd:::/usr/sbin/lpforms:euid=lp
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestPrinter Management:suser:cmd:::/usr/sbin/lpusers:euid=lp
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestPrinter Management:suser:cmd:::/usr/sbin/ppdmgr:euid=0
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestProcess Management:solaris:cmd:::/usr/bin/kill:privs=proc_owner
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestProcess Management:solaris:cmd:::/usr/bin/nice:privs=proc_owner,proc_priocntl
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestProcess Management:solaris:cmd:::/usr/bin/pcred:privs=proc_owner
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestProcess Management:solaris:cmd:::/usr/bin/pfiles:privs=proc_owner
48dc7c385d64e5d3906d6979100f106e857b4c02Andrew ForrestProcess Management:solaris:cmd:::/usr/bin/pflags:privs=proc_owner
Process Management:solaris:cmd:::/usr/bin/ppriv:privs=proc_owner
Process Management:solaris:cmd:::/usr/bin/renice:privs=proc_owner,proc_priocntl
Process Management:suser:cmd:::/usr/bin/crontab:euid=0
Process Management:suser:cmd:::/usr/bin/kill:euid=0
Process Management:suser:cmd:::/usr/bin/nice:euid=0
Process Management:suser:cmd:::/usr/bin/pcred:euid=0
Process Management:suser:cmd:::/usr/bin/pfiles:euid=0
Process Management:suser:cmd:::/usr/bin/pflags:euid=0
Process Management:suser:cmd:::/usr/bin/pldd:euid=0
Process Management:suser:cmd:::/usr/bin/pmap:euid=0
Process Management:suser:cmd:::/usr/bin/prun:euid=0
Process Management:suser:cmd:::/usr/bin/ps:euid=0
Process Management:suser:cmd:::/usr/bin/psig:euid=0
Process Management:suser:cmd:::/usr/bin/pstack:euid=0
Process Management:suser:cmd:::/usr/bin/pstop:euid=0
Process Management:suser:cmd:::/usr/bin/ptime:euid=0
Process Management:suser:cmd:::/usr/bin/ptree:euid=0
Process Management:suser:cmd:::/usr/bin/pwait:euid=0
Process Management:suser:cmd:::/usr/bin/pwdx:euid=0
Process Management:suser:cmd:::/usr/bin/renice:euid=0
Process Management:suser:cmd:::/usr/bin/truss:euid=0
Process Management:suser:cmd:::/usr/sbin/fuser:euid=0
Process Management:solaris:cmd:::/usr/sbin/rcapadm:uid=0
Project Management:solaris:cmd:::/usr/sbin/projadd:euid=0
Project Management:solaris:cmd:::/usr/sbin/projmod:euid=0
Project Management:solaris:cmd:::/usr/sbin/projdel:euid=0
Software Installation:suser:cmd:::/usr/bin/ln:euid=0
Software Installation:suser:cmd:::/usr/bin/pkginfo:uid=0
Software Installation:suser:cmd:::/usr/bin/pkgmk:uid=0
Software Installation:suser:cmd:::/usr/bin/pkgparam:uid=0
Software Installation:suser:cmd:::/usr/bin/pkgproto:uid=0
Software Installation:suser:cmd:::/usr/bin/pkgtrans:uid=0
Software Installation:suser:cmd:::/usr/ccs/bin/make:euid=0
Software Installation:suser:cmd:::/usr/sbin/install:euid=0
Software Installation:suser:cmd:::/usr/sbin/pkgadd:uid=0;gid=bin
Software Installation:suser:cmd:::/usr/sbin/pkgask:uid=0
Software Installation:suser:cmd:::/usr/sbin/pkgchk:uid=0
Software Installation:suser:cmd:::/usr/sbin/pkgrm:uid=0;gid=bin
System Event Management:suser:cmd:::/usr/sbin/syseventadm:uid=0
User Management:suser:cmd:::/usr/sbin/grpck:euid=0
User Management:suser:cmd:::/usr/sbin/pwck:euid=0
User Management:solaris:cmd:::/usr/sbin/useradd:uid=0
User Management:solaris:cmd:::/usr/sbin/userdel:uid=0
User Management:solaris:cmd:::/usr/sbin/usermod:uid=0
User Management:solaris:cmd:::/usr/sbin/roleadd:uid=0
User Management:solaris:cmd:::/usr/sbin/roledel:uid=0
User Management:solaris:cmd:::/usr/sbin/rolemod:uid=0
User Management:solaris:cmd:::/usr/sbin/groupadd:uid=0
User Management:solaris:cmd:::/usr/sbin/groupdel:uid=0
User Management:solaris:cmd:::/usr/sbin/groupmod:uid=0
User Security:suser:cmd:::/usr/bin/passwd:uid=0
User Security:solaris:cmd:::/usr/sbin/passmgmt:uid=0
User Security:suser:cmd:::/usr/sbin/pwck:euid=0
User Security:suser:cmd:::/usr/sbin/pwconv:euid=0
DAT Administration:solaris:cmd:::/usr/sbin/datadm:euid=0
ZFS File System Management:solaris:cmd:::/sbin/zfs:euid=0
ZFS Storage Management:solaris:cmd:::/sbin/zpool:uid=0
ZFS Storage Management:solaris:cmd:::/usr/lib/zfs/availdevs:uid=0
Zone Management:solaris:cmd:::/usr/sbin/txzonemgr:uid=0
Zone Management:solaris:cmd:::/usr/sbin/zonecfg:uid=0
Zone Management:solaris:cmd:::/usr/sbin/zoneadm:uid=0
Zone Management:solaris:cmd:::/usr/sbin/zlogin:uid=0
acctadm:solaris:cmd:::/usr/sbin/acctadm:euid=0;egid=0;privs=sys_acct,file_dac_write