2N/A<HTML>
2N/A<!--
2N/A CDDL HEADER START
2N/A
2N/A The contents of this file are subject to the terms of the
2N/A Common Development and Distribution License (the "License").
2N/A You may not use this file except in compliance with the License.
2N/A
2N/A You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
2N/A or http://www.opensolaris.org/os/licensing.
2N/A See the License for the specific language governing permissions
2N/A and limitations under the License.
2N/A
2N/A When distributing Covered Code, include this CDDL HEADER in each
2N/A file and include the License file at usr/src/OPENSOLARIS.LICENSE.
2N/A If applicable, add the following below this CDDL HEADER, with the
2N/A fields enclosed by brackets "[]" replaced with your own identifying
2N/A information: Portions Copyright [yyyy] [name of copyright owner]
2N/A
2N/A CDDL HEADER END
2N/A
2N/ACopyright (c) 2011, Oracle and/or its affiliates. All rights reserved.
2N/A
2N/A-->
2N/A<!--
2N/A <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
2N/A-->
2N/A<BODY>
2N/AWhen Edit Administrative Files is in the Authorizations Include
2N/Acolumn, it grants the authorization to edit administrative files
2N/Avia the pfedit command.
2N/AThe authorization to edit can be restricted to a specific file
2N/Aby granting the user this authorization adorned with the
2N/Aabsolute pathname of the file (e.g.,
2N/A<B>solaris.admin.edit//etc/syslog.conf</B>);
2N/Amultiple instances of such specific authorizations can be granted.
2N/A<p>
2N/AThe ability to modify the contents of some configuration
2N/Afiles can be used to escalate the privileges assigned to the user.
2N/AAssignment of an authorization to edit such a file,
2N/Aor of a profile containing such an authorization,
2N/Ashould be considered equivalent to providing full privileged access.
2N/A<p>
2N/AIf Edit Administrative Files is grayed, then you are not entitled
2N/Ato Add or Remove this authorization.
2N/A<BR>&nbsp;
2N/A</BODY>
2N/A</HTML>