AdminEdit.html revision 2
493N/A<HTML>
493N/A<!--
493N/A CDDL HEADER START
493N/A
493N/A The contents of this file are subject to the terms of the
493N/A Common Development and Distribution License (the "License").
493N/A You may not use this file except in compliance with the License.
493N/A
493N/A You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
493N/A or http://www.opensolaris.org/os/licensing.
493N/A See the License for the specific language governing permissions
493N/A and limitations under the License.
493N/A
493N/A When distributing Covered Code, include this CDDL HEADER in each
493N/A file and include the License file at usr/src/OPENSOLARIS.LICENSE.
493N/A If applicable, add the following below this CDDL HEADER, with the
493N/A fields enclosed by brackets "[]" replaced with your own identifying
493N/A information: Portions Copyright [yyyy] [name of copyright owner]
493N/A
493N/A CDDL HEADER END
493N/A
493N/ACopyright (c) 2011, Oracle and/or its affiliates. All rights reserved.
493N/A
493N/A-->
493N/A<!--
493N/A <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
493N/A-->
493N/A<BODY>
493N/AWhen Edit Administrative Files is in the Authorizations Include
493N/Acolumn, it grants the authorization to edit administrative files
493N/Avia the pfedit command.
493N/AThe authorization to edit can be restricted to a specific file
493N/Aby granting the user this authorization adorned with the
493N/Aabsolute pathname of the file (e.g.,
493N/A<B>solaris.admin.edit//etc/syslog.conf</B>);
493N/Amultiple instances of such specific authorizations can be granted.
493N/A<p>
493N/AThe ability to modify the contents of some configuration
493N/Afiles can be used to escalate the privileges assigned to the user.
493N/AAssignment of an authorization to edit such a file,
493N/Aor of a profile containing such an authorization,
493N/Ashould be considered equivalent to providing full privileged access.
493N/A<p>
493N/AIf Edit Administrative Files is grayed, then you are not entitled
to Add or Remove this authorization.
<BR>&nbsp;
</BODY>
</HTML>