Cross Reference: /osnet-11/usr/src/lib/libsecdb/help/auths/AdminEdit.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
2N/A<HTML>
2N/A<!--
2N/A CDDL HEADER START
2N/A
2N/A The contents of this file are subject to the terms of the
2N/A Common Development and Distribution License (the "License").
2N/A You may not use this file except in compliance with the License.
2N/A
2N/A You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
2N/A or http://www.opensolaris.org/os/licensing.
2N/A See the License for the specific language governing permissions
2N/A and limitations under the License.
2N/A
2N/A When distributing Covered Code, include this CDDL HEADER in each
2N/A file and include the License file at usr/src/OPENSOLARIS.LICENSE.
2N/A If applicable, add the following below this CDDL HEADER, with the
2N/A fields enclosed by brackets "[]" replaced with your own identifying
2N/A information: Portions Copyright [yyyy] [name of copyright owner]
2N/A
2N/A CDDL HEADER END
2N/A
2N/ACopyright (c) 2011, Oracle and/or its affiliates. All rights reserved.
2N/A
2N/A-->
2N/A<!--
2N/A <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
2N/A-->
2N/A<BODY>
2N/AWhen Edit Administrative Files is in the Authorizations Include
2N/Acolumn, it grants the authorization to edit administrative files
2N/Avia the pfedit command.
2N/AThe authorization to edit can be restricted to a specific file
2N/Aby granting the user this authorization adorned with the
2N/Aabsolute pathname of the file (e.g.,
2N/A<B>solaris.admin.edit//etc/syslog.conf</B>);
2N/Amultiple instances of such specific authorizations can be granted.
2N/A<p>
2N/AThe ability to modify the contents of some configuration
2N/Afiles can be used to escalate the privileges assigned to the user.
2N/AAssignment of an authorization to edit such a file,
2N/Aor of a profile containing such an authorization,
2N/Ashould be considered equivalent to providing full privileged access.
2N/A<p>
2N/AIf Edit Administrative Files is grayed, then you are not entitled
2N/Ato Add or Remove this authorization.
2N/A<BR>&nbsp;
2N/A</BODY>
2N/A</HTML>