priv_defs revision 134a1f4e3289b54e0f980e9cf05352e419a60bee
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync/*
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * CDDL HEADER START
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync *
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * The contents of this file are subject to the terms of the
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * Common Development and Distribution License (the "License").
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * You may not use this file except in compliance with the License.
c58f1213e628a545081c70e26c6b67a841cff880vboxsync *
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * or http://www.opensolaris.org/os/licensing.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * See the License for the specific language governing permissions
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * and limitations under the License.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync *
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * When distributing Covered Code, include this CDDL HEADER in each
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * If applicable, add the following below this CDDL HEADER, with the
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * fields enclosed by brackets "[]" replaced with your own identifying
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * information: Portions Copyright [yyyy] [name of copyright owner]
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync *
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * CDDL HEADER END
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync */
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync/*
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync * Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync *
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncINSERT COMMENT
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync */
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync#
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync# Privileges can be added to this file at any location, not
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync# necessarily at the end. For patches, it is probably best to
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync# add the new privilege at the end; for ordinary releases privileges
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync# should be ordered alphabetically.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync#
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_CONTRACT_EVENT
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to request critical events without limitation.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to request reliable delivery of all events on
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync any event queue.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_CONTRACT_IDENTITY
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to set the service FMRI value of a process
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync contract template.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_CONTRACT_OBSERVER
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to observe contract events generated by
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync contracts created and owned by users other than the process's
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync effective user ID.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to open contract event endpoints belonging to
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync contracts created and owned by users other than the process's
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync effective user ID.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_CPC_CPU
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allow a process to access per-CPU hardware performance counters.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_DTRACE_KERNEL
4e47bb772df0d04d1ded3e06354de547d52e2d06vboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows DTrace kernel-level tracing.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_DTRACE_PROC
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows DTrace process-level tracing.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows process-level tracing probes to be placed and enabled in
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync processes to which the user has permissions.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_DTRACE_USER
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows DTrace user-level tracing.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows use of the syscall and profile DTrace providers to
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync examine processes to which the user has permissions.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_FILE_CHOWN
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
d0f7737e04e7174cc1d27c5e3dfa3ba1156f3bc0vboxsync Allows a process to change a file's owner user ID.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to change a file's group ID to one other than
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync the process' effective group ID or one of the process'
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync supplemental group IDs.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_FILE_CHOWN_SELF
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to give away its files; a process with this
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync privilege will run as if {_POSIX_CHOWN_RESTRICTED} is not
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync in effect.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_FILE_DAC_EXECUTE
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to execute an executable file whose permission
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync bits or ACL do not allow the process execute permission.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_FILE_DAC_READ
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to read a file or directory whose permission
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync bits or ACL do not allow the process read permission.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_FILE_DAC_SEARCH
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to search a directory whose permission bits or
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync ACL do not allow the process search permission.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_FILE_DAC_WRITE
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to write a file or directory whose permission
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync bits or ACL do not allow the process write permission.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync In order to write files owned by uid 0 in the absence of an
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync effective uid of 0 ALL privileges are required.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_FILE_DOWNGRADE_SL
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to set the sensitivity label of a file or
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync directory to a sensitivity label that does not dominate the
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync existing sensitivity label.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync This privilege is interpreted only if the system is configured
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync with Trusted Extensions.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_FILE_FLAG_SET
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to set immutable, nounlink or appendonly
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync file attributes.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncbasic privilege PRIV_FILE_LINK_ANY
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to create hardlinks to files owned by a uid
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync different from the process' effective uid.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_FILE_OWNER
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process which is not the owner of a file or directory
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync to perform the following operations that are normally permitted
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync only for the file owner: modify that file's access and
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync modification times; remove or rename a file or directory whose
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync parent directory has the ``save text image after execution''
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync (sticky) bit set; mount a ``namefs'' upon a file; modify
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync permission bits or ACL except for the set-uid and set-gid
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync bits.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncbasic privilege PRIV_FILE_READ
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to read objects in the filesystem.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_FILE_SETID
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to change the ownership of a file or write to
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync a file without the set-user-ID and set-group-ID bits being
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync cleared.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to set the set-group-ID bit on a file or
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync directory whose group is not the process' effective group or
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync one of the process' supplemental groups.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to set the set-user-ID bit on a file with
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync different ownership in the presence of PRIV_FILE_OWNER.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Additional restrictions apply when creating or modifying a
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync set-uid 0 file.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_FILE_UPGRADE_SL
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to set the sensitivity label of a file or
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync directory to a sensitivity label that dominates the existing
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync sensitivity label.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync This privilege is interpreted only if the system is configured
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync with Trusted Extensions.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncbasic privilege PRIV_FILE_WRITE
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to modify objects in the filesystem.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_GRAPHICS_ACCESS
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to make privileged ioctls to graphics devices.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Typically only xserver process needs to have this privilege.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync A process with this privilege is also allowed to perform
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync privileged graphics device mappings.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_GRAPHICS_MAP
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to perform privileged mappings through a
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync graphics device.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_IPC_DAC_READ
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to read a System V IPC
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Message Queue, Semaphore Set, or Shared Memory Segment whose
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync permission bits do not allow the process read permission.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to read remote shared memory whose
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync permission bits do not allow the process read permission.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncprivilege PRIV_IPC_DAC_WRITE
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to write a System V IPC
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Message Queue, Semaphore Set, or Shared Memory Segment whose
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync permission bits do not allow the process write permission.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to read remote shared memory whose
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync permission bits do not allow the process write permission.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Additional restrictions apply if the owner of the object has uid 0
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync and the effective uid of the current process is not 0.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_IPC_OWNER
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process which is not the owner of a System
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync V IPC Message Queue, Semaphore Set, or Shared Memory Segment to
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync remove, change ownership of, or change permission bits of the
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Message Queue, Semaphore Set, or Shared Memory Segment.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Additional restrictions apply if the owner of the object has uid 0
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync and the effective uid of the current process is not 0.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncbasic privilege PRIV_NET_ACCESS
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to open a TCP, UDP, SDP or SCTP network endpoint.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_NET_BINDMLP
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allow a process to bind to a port that is configured as a
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync multi-level port(MLP) for the process's zone. This privilege
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync applies to both shared address and zone-specific address MLPs.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync See tnzonecfg(4) from the Trusted Extensions manual pages for
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync information on configuring MLP ports.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync This privilege is interpreted only if the system is configured
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync with Trusted Extensions.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_NET_ICMPACCESS
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to send and receive ICMP packets.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_NET_MAC_AWARE
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to set NET_MAC_AWARE process flag by using
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync setpflags(2). This privilege also allows a process to set
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync SO_MAC_EXEMPT socket option by using setsockopt(3SOCKET).
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync The NET_MAC_AWARE process flag and the SO_MAC_EXEMPT socket
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync option both allow a local process to communicate with an
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync unlabeled peer if the local process' label dominates the
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync peer's default label, or if the local process runs in the
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync global zone.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync This privilege is interpreted only if the system is configured
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync with Trusted Extensions.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_NET_MAC_IMPLICIT
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to set SO_MAC_IMPLICIT option by using
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync setsockopt(3SOCKET). This allows a privileged process to
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync transmit implicitly-labeled packets to a peer.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync This privilege is interpreted only if the system is configured
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync with Trusted Extensions.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_NET_OBSERVABILITY
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to access /dev/lo0 and the devices in /dev/ipnet/
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync while not requiring them to need PRIV_NET_RAWACCESS.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_NET_PRIVADDR
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to bind to a privileged port
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync number. The privilege port numbers are 1-1023 (the traditional
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync UNIX privileged ports) as well as those ports marked as
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync "udp/tcp_extra_priv_ports" with the exception of the ports
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync reserved for use by NFS.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_NET_RAWACCESS
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to have direct access to the network layer.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncunsafe privilege PRIV_PROC_AUDIT
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to generate audit records.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to get its own audit pre-selection information.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_PROC_CHROOT
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync Allows a process to change its root directory.
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsync
4da34d78db758ccce247d0cc80b926a873a7a57cvboxsyncprivilege PRIV_PROC_CLOCK_HIGHRES
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to use high resolution timers.
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncbasic privilege PRIV_PROC_EXEC
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync Allows a process to call execve().
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsyncbasic privilege PRIV_PROC_FORK
01f0d2858d4377ecf19f5aac2531efe99fef9ffcvboxsync
Allows a process to call fork1()/forkall()/vfork()
basic privilege PRIV_PROC_INFO
Allows a process to examine the status of processes other
than those it can send signals to. Processes which cannot
be examined cannot be seen in /proc and appear not to exist.
privilege PRIV_PROC_LOCK_MEMORY
Allows a process to lock pages in physical memory.
privilege PRIV_PROC_OWNER
Allows a process to send signals to other processes, inspect
and modify process state to other processes regardless of
ownership. When modifying another process, additional
restrictions apply: the effective privilege set of the
attaching process must be a superset of the target process'
effective, permitted and inheritable sets; the limit set must
be a superset of the target's limit set; if the target process
has any uid set to 0 all privilege must be asserted unless the
effective uid is 0.
Allows a process to bind arbitrary processes to CPUs.
privilege PRIV_PROC_PRIOCNTL
Allows a process to elevate its priority above its current level.
Allows a process to change its scheduling class to any scheduling class,
including the RT class.
basic privilege PRIV_PROC_SESSION
Allows a process to send signals or trace processes outside its
session.
unsafe privilege PRIV_PROC_SETID
Allows a process to set its uids at will.
Assuming uid 0 requires all privileges to be asserted.
privilege PRIV_PROC_TASKID
Allows a process to assign a new task ID to the calling process.
privilege PRIV_PROC_ZONE
Allows a process to trace or send signals to processes in
other zones.
privilege PRIV_SYS_ACCT
Allows a process to enable and disable and manage accounting through
acct(2), getacct(2), putacct(2) and wracct(2).
privilege PRIV_SYS_ADMIN
Allows a process to perform system administration tasks such
as setting node and domain name and specifying nscd and coreadm
settings.
privilege PRIV_SYS_AUDIT
Allows a process to start the (kernel) audit daemon.
Allows a process to view and set audit state (audit user ID,
audit terminal ID, audit sessions ID, audit pre-selection mask).
Allows a process to turn off and on auditing.
Allows a process to configure the audit parameters (cache and
queue sizes, event to class mappings, policy options).
privilege PRIV_SYS_CONFIG
Allows a process to perform various system configuration tasks.
Allows a process to add and remove swap devices; when adding a swap
device, a process must also have sufficient privileges to read from
and write to the swap device.
privilege PRIV_SYS_DEVICES
Allows a process to successfully call a kernel module that
calls the kernel drv_priv(9F) function to check for allowed
access.
Allows a process to open the real console device directly.
Allows a process to open devices that have been exclusively opened.
privilege PRIV_SYS_IPC_CONFIG
Allows a process to increase the size of a System V IPC Message
Queue buffer.
privilege PRIV_SYS_LINKDIR
Allows a process to unlink and link directories.
privilege PRIV_SYS_MOUNT
Allows filesystem specific administrative procedures, such as
filesystem configuration ioctls, quota calls and creation/deletion
of snapshots.
Allows a process to mount and unmount filesystems which would
otherwise be restricted (i.e., most filesystems except
namefs).
A process performing a mount operation needs to have
appropriate access to the device being mounted (read-write for
"rw" mounts, read for "ro" mounts).
A process performing any of the aforementioned
filesystem operations needs to have read/write/owner
access to the mount point.
Only regular files and directories can serve as mount points
for processes which do not have all zone privileges asserted.
Unless a process has all zone privileges, the mount(2)
system call will force the "nosuid" and "restrict" options, the
latter only for autofs mountpoints.
Regardless of privileges, a process running in a non-global zone may
only control mounts performed from within said zone.
Outside the global zone, the "nodevices" option is always forced.
privilege PRIV_SYS_IPTUN_CONFIG
Allows a process to configure IP tunnel links.
privilege PRIV_SYS_DL_CONFIG
Allows a process to configure all classes of datalinks, including
configuration allowed by PRIV_SYS_IPTUN_CONFIG.
privilege PRIV_SYS_IP_CONFIG
Allows a process to configure a system's IP interfaces and routes.
Allows a process to configure network parameters using ndd.
Allows a process access to otherwise restricted information using ndd.
Allows a process to configure IPsec.
Allows a process to pop anchored STREAMs modules with matching zoneid.
privilege PRIV_SYS_NET_CONFIG
Allows all that PRIV_SYS_IP_CONFIG, PRIV_SYS_DL_CONFIG, and
PRIV_SYS_PPP_CONFIG allow.
Allows a process to push the rpcmod STREAMs module.
Allows a process to INSERT/REMOVE STREAMs modules on locations other
than the top of the module stack.
privilege PRIV_SYS_NFS
Allows a process to perform Sun private NFS specific system calls.
Allows a process to bind to ports reserved by NFS: ports 2049 (nfs)
and port 4045 (lockd).
privilege PRIV_SYS_PPP_CONFIG
Allows a process to create and destroy PPP (sppp) interfaces.
Allows a process to configure PPP tunnels (sppptun).
privilege PRIV_SYS_RES_CONFIG
Allows a process to create and delete processor sets, assign
CPUs to processor sets and override the PSET_NOESCAPE property.
Allows a process to change the operational status of CPUs in
the system using p_online(2).
Allows a process to configure resource pools and to bind
processes to pools
unsafe privilege PRIV_SYS_RESOURCE
Allows a process to modify the resource limits specified
by setrlimit(2) and setrctl(2) without restriction.
Allows a process to exceed the per-user maximum number of
processes.
Allows a process to extend or create files on a filesystem that
has less than minfree space in reserve.
privilege PRIV_SYS_SMB
Allows a process to access the Sun private SMB kernel module.
Allows a process to bind to ports reserved by NetBIOS and SMB:
ports 137 (NBNS), 138 (NetBIOS Datagram Service), 139 (NetBIOS
Session Service and SMB-over-NBT) and 445 (SMB-over-TCP).
privilege PRIV_SYS_SUSER_COMPAT
Allows a process to successfully call a third party loadable module
that calls the kernel suser() function to check for allowed access.
This privilege exists only for third party loadable module
compatibility and is not used by Solaris proper.
privilege PRIV_SYS_TIME
Allows a process to manipulate system time using any of the
appropriate system calls: stime, adjtime, ntp_adjtime and
the IA specific RTC calls.
privilege PRIV_SYS_TRANS_LABEL
Allows a process to translate labels that are not dominated
by the process' sensitivity label to and from an external
string form.
This privilege is interpreted only if the system is configured
with Trusted Extensions.
privilege PRIV_VIRT_MANAGE
Allows a process to manage virtualized environments such as
xVM(5).
privilege PRIV_WIN_COLORMAP
Allows a process to override colormap restrictions.
Allows a process to install or remove colormaps.
Allows a process to retrieve colormap cell entries allocated
by other processes.
This privilege is interpreted only if the system is configured
with Trusted Extensions.
privilege PRIV_WIN_CONFIG
Allows a process to configure or destroy resources that are
permanently retained by the X server.
Allows a process to use SetScreenSaver to set the screen
saver timeout value.
Allows a process to use ChangeHosts to modify the display
access control list.
Allows a process to use GrabServer.
Allows a process to use the SetCloseDownMode request which
may retain window, pixmap, colormap, property, cursor, font,
or graphic context resources.
This privilege is interpreted only if the system is configured
with Trusted Extensions.
privilege PRIV_WIN_DAC_READ
Allows a process to read from a window resource that it does
not own (has a different user ID).
This privilege is interpreted only if the system is configured
with Trusted Extensions.
privilege PRIV_WIN_DAC_WRITE
Allows a process to write to or create a window resource that
it does not own (has a different user ID). A newly created
window property is created with the window's user ID.
This privilege is interpreted only if the system is configured
with Trusted Extensions.
privilege PRIV_WIN_DEVICES
Allows a process to perform operations on window input devices.
Allows a process to get and set keyboard and pointer controls.
Allows a process to modify pointer button and key mappings.
This privilege is interpreted only if the system is configured
with Trusted Extensions.
privilege PRIV_WIN_DGA
Allows a process to use the direct graphics access (DGA) X protocol
extensions. Direct process access to the frame buffer is still
required. Thus the process must have MAC and DAC privileges that
allow access to the frame buffer, or the frame buffer must be
allocated to the process.
This privilege is interpreted only if the system is configured
with Trusted Extensions.
privilege PRIV_WIN_DOWNGRADE_SL
Allows a process to set the sensitivity label of a window resource
to a sensitivity label that does not dominate the existing
sensitivity label.
This privilege is interpreted only if the system is configured
with Trusted Extensions.
privilege PRIV_WIN_FONTPATH
Allows a process to set a font path.
This privilege is interpreted only if the system is configured
with Trusted Extensions.
privilege PRIV_WIN_MAC_READ
Allows a process to read from a window resource whose sensitivity
label is not equal to the process sensitivity label.
This privilege is interpreted only if the system is configured
with Trusted Extensions.
privilege PRIV_WIN_MAC_WRITE
Allows a process to create a window resource whose sensitivity
label is not equal to the process sensitivity label.
A newly created window property is created with the window's
sensitivity label.
This privilege is interpreted only if the system is configured
with Trusted Extensions.
privilege PRIV_WIN_SELECTION
Allows a process to request inter-window data moves without the
intervention of the selection confirmer.
This privilege is interpreted only if the system is configured
with Trusted Extensions.
privilege PRIV_WIN_UPGRADE_SL
Allows a process to set the sensitivity label of a window
resource to a sensitivity label that dominates the existing
sensitivity label.
This privilege is interpreted only if the system is configured
with Trusted Extensions.
privilege PRIV_XVM_CONTROL
Allows a process access to the xVM(5) control devices for
managing guest domains and the hypervisor. This privilege is
used only if booted into xVM on x86 platforms.
set PRIV_EFFECTIVE
Set of privileges currently in effect.
set PRIV_INHERITABLE
Set of privileges that comes into effect on exec.
set PRIV_PERMITTED
Set of privileges that can be put into the effective set without
restriction.
set PRIV_LIMIT
Set of privileges that determines the absolute upper bound of
privileges this process and its off-spring can obtain.