te
Copyright 2008 Sun Microsystems, Inc. All Rights Reserved
The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License.
You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing. See the License for the specific language governing permissions and limitations under the License.
When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE. If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
DEALLOCATE 1 "Apr 30, 2008"
NAME
deallocate - device deallocation
SYNOPSIS

deallocate [-s] [-w] [-F] [-z zonename]
 [-c dev-class | -g dev-type | device]


deallocate [-s] [-w] [-F] [-z zonename] -I
DESCRIPTION

The deallocate command frees an allocated device. It resets the ownership and permissions on all device special files associated with the device, disabling access to that device. deallocate runs the device cleaning program for that device as specified in device_allocate(4).

The default deallocate operation deallocates devices allocated to the user.

OPTIONS

The following options are supported: -c dev-class

Deallocates all devices of the specified device class.

-F device

Forces deallocation of the device associated with the file specified by device. Only a user with the solaris.device.revoke authorization is permitted to use this option.

-I

Forces deallocation of all allocatable devices. Only a user with the solaris.device.revoke authorization is permitted to use this option. This option should only be used at system initialization.

-s

Silent. Suppresses any diagnostic output.

The following options are supported when the system is configured with Trusted Extensions: -g dev-type

Deallocates a device of device type matching dev-type.

-w

Runs the device cleaning program in a windowing environment. If a windowing version of the program exists, it is used. Otherwise, the standard version is run in a terminal window.

-z zonename

Deallocates device from the zone specified by zonename.

OPERANDS

The following operands are supported: device

Deallocates the specified device.

EXIT STATUS

The following exit values are returned: 0

Successful completion.

20

No entry for the specified device.

other value

An error occurred.

FILES

/etc/security/device_allocate

/etc/security/device_maps

/etc/security/dev/*

/etc/security/lib/*

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE ATTRIBUTE VALUE
Interface Stability See below.

The invocation is Uncommitted. The options are Uncommitted. The output is Not-an-Interface.

SEE ALSO

allocate(1), list_devices(1), bsmconv(1M), dminfo(1M), mkdevalloc(1M), mkdevmaps(1M), device_allocate(4), device_maps(4), attributes(5)

Controlling Access to Devices

NOTES

The functionality described in this man page is available only if Solaris Auditing has been enabled. See bsmconv(1M) for more information.

On systems configured with Trusted Extensions, the functionality is enabled by default.

/etc/security/dev, mkdevalloc(1M), and mkdevmaps(1M) might not be supported in a future release of the Solaris Operating Environment.