2N/A# Copyright 2008 Sun Microsystems, Inc. All rights reserved.
2N/A# Use is subject to license terms.
2N/A# The contents of this file are subject to the terms of the
2N/A# Common Development and Distribution License (the "License").
2N/A# You may not use this file except in compliance with the License.
2N/A# See the License for the specific language governing permissions
2N/A# and limitations under the License.
2N/A# When distributing Covered Code, include this CDDL HEADER in each
2N/A# If applicable, add the following below this CDDL HEADER, with the
2N/A# fields enclosed by brackets "[]" replaced with your own identifying
2N/A# information: Portions Copyright [yyyy] [name of copyright owner]
2N/A# Device policy configuration file. When devices are opened the
2N/A# additional access controls in this file are enforced.
2N/A# The format of this file is subject to change without notice.
2N/A# Default open privileges, must be first entry in the file.
2N/A* read_priv_set=none write_priv_set=none
2N/A# Kernel memory devices.
2N/Amm:allkmem read_priv_set=all write_priv_set=all
2N/Amm:kmem read_priv_set=none write_priv_set=all
2N/Amm:mem read_priv_set=none write_priv_set=all
2N/A# Socket interface access permissions.
2N/Aicmp read_priv_set=net_icmpaccess write_priv_set=net_icmpaccess
2N/Aicmp6 read_priv_set=net_icmpaccess write_priv_set=net_icmpaccess
2N/Aip read_priv_set=net_rawaccess write_priv_set=net_rawaccess
2N/Aip6 read_priv_set=net_rawaccess write_priv_set=net_rawaccess
2N/Akeysock read_priv_set=sys_ip_config write_priv_set=sys_ip_config
2N/Aipsecah read_priv_set=sys_ip_config write_priv_set=sys_ip_config
2N/Aipsecesp read_priv_set=sys_ip_config write_priv_set=sys_ip_config
2N/Aspdsock read_priv_set=sys_ip_config write_priv_set=sys_ip_config
2N/A# Raw network interface access permissions
2N/Adnet read_priv_set=net_rawaccess write_priv_set=net_rawaccess
2N/Aelxl read_priv_set=net_rawaccess write_priv_set=net_rawaccess
2N/Aibd read_priv_set=net_rawaccess write_priv_set=net_rawaccess
2N/Aiprb read_priv_set=net_rawaccess write_priv_set=net_rawaccess
2N/Apcelx read_priv_set=net_rawaccess write_priv_set=net_rawaccess
2N/Aspwr read_priv_set=net_rawaccess write_priv_set=net_rawaccess
2N/Aaggr read_priv_set=net_rawaccess write_priv_set=net_rawaccess
2N/Avnic read_priv_set=net_rawaccess write_priv_set=net_rawaccess
2N/Asoftmac read_priv_set=net_rawaccess write_priv_set=net_rawaccess
2N/A# Virtual network interface access permission
2N/Avni read_priv_set=net_rawaccess write_priv_set=net_rawaccess
2N/Amd:admin write_priv_set=sys_config
2N/Afssnap:ctl read_priv_set=sys_config write_priv_set=sys_config
2N/Ascsi_vhci:devctl write_priv_set=sys_devices
2N/A# Other devices that require a privilege to open.
2N/Arandom write_priv_set=sys_devices
2N/Aopeneepr write_priv_set=all
2N/Aipf read_priv_set=sys_ip_config write_priv_set=sys_ip_config