priv_defs revision b127ac411761a3d8d642d9342d9cac2785e1faaa
* Copyright 2008 Sun Microsystems, Inc. All rights reserved. * Use is subject to license terms. Allows a process to open contract event endpoints belonging to contracts created and owned by users other than the process's
the process' effective group ID or one of the process' privilege PRIV_FILE_OWNER Allows a process which is not the owner of a file or directory to perform the following operations that are normally permitted only for the file owner: modify that file's
access and applies to both shared address and zone-specific address MLPs. See tnzonecfg(4) from the Trusted Extensions manual pages for information on configuring MLP ports. This privilege is interpreted only if the system is configured privilege PRIV_NET_ICMPACCESS Allows a process to send and receive ICMP packets. privilege PRIV_NET_MAC_AWARE Allows a process to set NET_MAC_AWARE process flag by using setpflags(2). This privilege also allows a process to set SO_MAC_EXEMPT socket option by using setsockopt(3SOCKET). The NET_MAC_AWARE process flag and the SO_MAC_EXEMPT socket option both allow a local process to communicate with an peer's default label, or if the local process runs in the This privilege is interpreted only if the system is configured privilege PRIV_NET_OBSERVABILITY while not requiring them to need PRIV_NET_RAWACCESS. privilege PRIV_NET_PRIVADDR Allows a process to bind to a privileged port number. The privilege port numbers are 1-1023 (the traditional UNIX privileged ports) as well as those ports marked as privilege PRIV_NET_RAWACCESS Allows a process to have direct access to the network layer. unsafe privilege PRIV_PROC_AUDIT Allows a process to generate audit records. Allows a process to get its own audit pre-selection information. privilege PRIV_PROC_CHROOT Allows a process to change its root directory. privilege PRIV_PROC_CLOCK_HIGHRES Allows a process to use high resolution timers. basic privilege PRIV_PROC_EXEC Allows a process to call execve(). basic privilege PRIV_PROC_FORK Allows a process to call fork1()/forkall()/vfork() basic privilege PRIV_PROC_INFO Allows a process to examine the status of processes other than those it can send signals to. Processes which cannot be examined cannot be seen in /proc and appear not to exist. privilege PRIV_PROC_LOCK_MEMORY Allows a process to lock pages in physical memory. privilege PRIV_PROC_OWNER Allows a process to send signals to other processes, inspect and modify process state to other processes regardless of ownership. When modifying another process, additional restrictions apply: the effective privilege set of the attaching process must be a superset of the target process' has any uid set to 0 all privilege must be asserted unless the Allows a process to bind arbitrary processes to CPUs. privilege PRIV_PROC_PRIOCNTL Allows a process to elevate its priority above its current level. Allows a process to change its scheduling class to any scheduling class, basic privilege PRIV_PROC_SESSION Allows a process to send signals or trace processes outside its unsafe privilege PRIV_PROC_SETID Allows a process to set its uids at will. Assuming uid 0 requires all privileges to be asserted. privilege PRIV_PROC_TASKID Allows a process to assign a new task ID to the calling process. Allows a process to trace or send signals to processes in Allows a process to enable and disable and manage accounting through acct(2), getacct(2), putacct(2) and wracct(2). Allows a process to perform system administration tasks such as setting node and domain name and specifying nscd and coreadm Allows a process to start the (kernel) audit daemon. Allows a process to view and set audit state (audit user ID, audit terminal ID, audit sessions ID, audit pre-selection mask). Allows a process to turn off and on auditing. Allows a process to configure the audit parameters (cache and queue sizes, event to class mappings, policy options). privilege PRIV_SYS_CONFIG Allows a process to perform various system configuration tasks. Allows a process to add and remove swap devices; when adding a swap device, a process must also have sufficient privileges to read from and write to the swap device. privilege PRIV_SYS_DEVICES Allows a process to successfully call a kernel module that calls the kernel drv_priv(9F) function to check for allowed Allows a process to open the real console device directly. Allows a process to open devices that have been exclusively opened. privilege PRIV_SYS_IPC_CONFIG Allows a process to increase the size of a System V IPC Message privilege PRIV_SYS_LINKDIR Allows a process to unlink and link directories. Allows filesystem specific administrative procedures, such as Allows a process to mount and unmount filesystems which would otherwise be restricted (i.e., most filesystems except A process performing a mount operation needs to have appropriate access to the device being mounted (read-write for "rw" mounts, read for "ro" mounts). A process performing any of the aforementioned access to the mount point. Only regular files and directories can serve as mount points for processes which do not have all zone privileges asserted. Unless a process has all zone privileges, the mount(2) system call will force the "nosuid" and "restrict" options, the latter only for autofs mountpoints. Regardless of privileges, a process running in a non-global zone may only control mounts performed from within said zone. Outside the global zone, the "nodevices" option is always forced. privilege PRIV_SYS_DL_CONFIG Allows a process to configure network parameters using ndd. Allows a process access to otherwise restricted information using ndd. Allows a process to configure IPsec. Allows a process to pop anchored STREAMs modules with matching zoneid. privilege PRIV_SYS_NET_CONFIG Allows all that PRIV_SYS_IP_CONFIG and PRIV_SYS_DL_CONFIG allow. Allows a process to push the rpcmod STREAMs module. Allows a process to INSERT/REMOVE STREAMs modules on locations other than the top of the module stack. Allows a process to perform Sun private NFS specific system calls. Allows a process to bind to ports reserved by NFS: ports 2049 (nfs) privilege PRIV_SYS_RES_CONFIG Allows a process to create and delete processor sets, assign CPUs to processor sets and override the PSET_NOESCAPE property. Allows a process to change the operational status of CPUs in the system using p_online(2). Allows a process to configure resource pools and to bind unsafe privilege PRIV_SYS_RESOURCE Allows a process to modify the resource limits specified by setrlimit(2) and setrctl(2) without restriction. Allows a process to exceed the per-user maximum number of Allows a process to extend or create files on a filesystem that has less than minfree space in reserve. Allows a process to access the Sun private SMB kernel module. Allows a process to bind to ports reserved by NetBIOS and SMB: ports 137 (NBNS), 138 (NetBIOS Datagram Service), 139 (NetBIOS Session Service and SMB-over-NBT) and 445 (SMB-over-TCP). privilege PRIV_SYS_SUSER_COMPAT Allows a process to successfully call a third party loadable module that calls the kernel suser() function to check for allowed access. This privilege exists only for third party loadable module compatibility and is not used by Solaris proper. Allows a process to manipulate system time using any of the appropriate system calls: stime, adjtime, ntp_adjtime and the IA specific RTC calls. privilege PRIV_SYS_TRANS_LABEL Allows a process to translate labels that are not dominated This privilege is interpreted only if the system is configured privilege PRIV_WIN_DEVICES Allows a process to perform operations on window input devices. Allows a process to get and set keyboard and pointer controls. Allows a process to modify pointer button and key mappings. This privilege is interpreted only if the system is configured Allows a process to use the direct graphics access (DGA) X protocol extensions. Direct process access to the frame buffer is still required. Thus the process must have MAC and DAC privileges that allow access to the frame buffer, or the frame buffer must be allocated to the process. This privilege is interpreted only if the system is configured privilege PRIV_WIN_DOWNGRADE_SL Allows a process to set the sensitivity label of a window resource to a sensitivity label that does not dominate the existing This privilege is interpreted only if the system is configured privilege PRIV_WIN_FONTPATH Allows a process to set a font path. This privilege is interpreted only if the system is configured privilege PRIV_WIN_MAC_READ Allows a process to read from a window resource whose sensitivity label is not equal to the process sensitivity label. This privilege is interpreted only if the system is configured privilege PRIV_WIN_MAC_WRITE Allows a process to create a window resource whose sensitivity label is not equal to the process sensitivity label. A newly created window property is created with the window's