2N/A<HTML>
2N/A<!--
2N/A CDDL HEADER START
2N/A
2N/A The contents of this file are subject to the terms of the
2N/A Common Development and Distribution License, Version 1.0 only
2N/A (the "License"). You may not use this file except in compliance
2N/A with the License.
2N/A
2N/A You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
2N/A or http://www.opensolaris.org/os/licensing.
2N/A See the License for the specific language governing permissions
2N/A and limitations under the License.
2N/A
2N/A When distributing Covered Code, include this CDDL HEADER in each
2N/A file and include the License file at usr/src/OPENSOLARIS.LICENSE.
2N/A If applicable, add the following below this CDDL HEADER, with the
2N/A fields enclosed by brackets "[]" replaced with your own identifying
2N/A information: Portions Copyright [yyyy] [name of copyright owner]
2N/A
2N/A CDDL HEADER END
2N/A
2N/A-- Copyright 2000 Sun Microsystems, Inc. All rights reserved.
2N/A-- Use is subject to license terms.
2N/A-->
2N/A<HEAD>
2N/A <TITLE> </TITLE>
2N/A
2N/A
2N/A</HEAD>
2N/A<BODY>
2N/A<!-- ident "%Z%%M% %I% %E% SMI" -->
2N/A
2N/A
2N/AWhen All is in the Rights Included column, it grants the right for a user or role to use any command when working in an administrator's shell, such as the Administrator's Korn or Administrator's C shells.
2N/A<p>
2N/AThe normal policy for these shells is that they can only execute commands that have been explicitly assigned to a user (or role) through granted rights. Because using only the granted rights can be very limiting, it is common to give users the All right, which has a wild card entry matching every command.
2N/A<p>
2N/AHowever, no special process attributes are associated with the wild card, so the effect is that all commands matching the wild card run with the uid and gid of the current user (or role).
2N/A<p>
2N/AIf you assign this right, it should always be last in the list of rights. If it is first, no other rights are consulted when looking up command attributes.
2N/A<p>
2N/AIf All is grayed, then you are not entitled to Add or Remove this right.
2N/A</BODY>
2N/A</HTML>