Application Server Management: /usr/appserver/bin/asadmin Basic Solaris User: /usr/bin/cdda2wav.bin privs=file_dac_read,sys_devices,proc_priocntl,net_privaddr /usr/bin/cdrecord.bin privs=file_dac_read,sys_devices,proc_lock_memory,proc_priocntl,net_privaddr /usr/bin/readcd.bin privs=file_dac_read,sys_devices,net_privaddr All: * Desktop Configuration: /usr/X11/bin/scanpci euid=0, privs=sys_config /usr/X11/bin/xorgcfg euid=0 /usr/X11/bin/xorgconfig euid=0 File System Management: /sbin/mount privs=sys_mount /sbin/umount privs=sys_mount /usr/sbin/mpathadm privs=sys_devices /usr/sbin/quotacheck uid=0, gid=sys /usr/sbin/quotaoff uid=0, gid=sys /usr/sbin/quotaon uid=0, gid=sys /usr/sbin/raidctl privs=sys_config,sys_devices, euid=0 FTP Management: /usr/sbin/ftpaddhost uid=0 /usr/sbin/ftpconfig uid=0 /usr/sbin/ftprestart euid=0 /usr/sbin/ftpshut euid=0, egid=sys /usr/sbin/privatepw uid=0, egid=sys IP Filter Management: /usr/sbin/ipf privs=sys_ip_config /usr/sbin/ipfs privs=sys_ip_config /usr/sbin/ipfstat privs=sys_ip_config, gid=sys /usr/sbin/ipmon privs=sys_ip_config /usr/sbin/ipnat privs=sys_ip_config, gid=sys /usr/sbin/ippool privs=sys_ip_config, gid=sys Mail Management: /usr/lib/sendmail uid=0 /usr/sbin/editmap euid=0 /usr/sbin/makemap euid=0 /usr/sbin/newaliases euid=0 Maintenance and Repair: /usr/bin/coreadm euid=0, privs=sys_config,proc_owner /usr/bin/mdb privs=all /usr/sbin/ucodeadm privs=all Media Backup: /usr/bin/mt euid=0 /usr/lib/fs/ufs/ufsdump euid=0, gid=sys /usr/sbin/tar euid=0 Media Restore: /usr/bin/cpio euid=0 /usr/bin/mt euid=0 /usr/lib/fs/ufs/ufsrestore euid=0 /usr/sbin/tar euid=0 Printer Management: /usr/lib/lp/local/lpadmin uid=lp, gid=lp /usr/sbin/lpfilter euid=lp, uid=lp /usr/sbin/lpforms euid=lp /usr/sbin/lpusers euid=lp /usr/sbin/ppdmgr euid=0 Postgres Administration: /usr/postgres/8.2/bin/initdb uid=postgres /usr/postgres/8.2/bin/ipcclean uid=postgres /usr/postgres/8.2/bin/pg_controldata uid=postgres /usr/postgres/8.2/bin/pg_ctl uid=postgres /usr/postgres/8.2/bin/pg_resetxlog uid=postgres /usr/postgres/8.2/bin/postgres uid=postgres /usr/postgres/8.2/bin/postmaster uid=postgres Primary Administrator: * uid=0, gid=0 Software Installation: /usr/bin/ln euid=0 /usr/bin/pkginfo uid=0 /usr/bin/pkgmk uid=0 /usr/bin/pkgparam uid=0 /usr/bin/pkgproto uid=0 /usr/bin/pkgtrans uid=0 /usr/bin/prodreg uid=0 /usr/ccs/bin/make euid=0 /usr/sbin/install euid=0 /usr/sbin/patchadd uid=0 /usr/sbin/patchrm uid=0 /usr/sbin/pkgadd uid=0, gid=bin /usr/sbin/pkgask uid=0 /usr/sbin/pkgchk uid=0 /usr/sbin/pkgrm uid=0, gid=bin Audit Review: /usr/sbin/auditreduce euid=0 /usr/sbin/auditstat euid=0 /usr/sbin/praudit euid=0 Cron Management: /usr/bin/crontab euid=0 Device Management: /usr/sbin/add_drv uid=0 /usr/sbin/allocate uid=0 /usr/sbin/deallocate uid=0 /usr/sbin/rem_drv uid=0 /usr/sbin/update_drv uid=0 Name Service Management: /usr/bin/nischttl euid=0 /usr/bin/nisln euid=0 /usr/lib/nis/nisctl euid=0 /usr/lib/nis/nisping euid=0 /usr/lib/nis/nisshowcache euid=0 /usr/lib/nis/nisstat euid=0 /usr/sbin/nscd euid=0 Network Management: /sbin/dladm euid=dladm, egid=sys, privs=sys_net_config,net_rawaccess,proc_audit /sbin/ifconfig uid=0 /sbin/route privs=sys_ip_config /sbin/routeadm euid=0, privs=proc_chroot,proc_owner,sys_ip_config /usr/sbin/quaggaadm privs=basic /usr/sbin/zebraadm privs=basic Object Access Management: /usr/bin/chgrp privs=file_chown /usr/bin/chmod privs=file_owner /usr/bin/chown privs=file_chown /usr/bin/setfacl privs=file_owner Process Management: /usr/bin/kill privs=proc_owner /usr/bin/nice privs=proc_owner,proc_priocntl /usr/bin/pcred privs=proc_owner /usr/bin/pfiles privs=proc_owner /usr/bin/pflags privs=proc_owner /usr/bin/ppriv privs=proc_owner /usr/bin/renice privs=proc_owner,proc_priocntl /usr/sbin/rcapadm uid=0 User Management: /usr/sbin/groupadd uid=0 /usr/sbin/groupdel uid=0 /usr/sbin/groupmod uid=0 /usr/sbin/roleadd euid=0 /usr/sbin/roledel euid=0 /usr/sbin/rolemod euid=0 /usr/sbin/useradd euid=0 /usr/sbin/userdel euid=0 /usr/sbin/usermod euid=0 Project Management: /usr/sbin/projadd euid=0 /usr/sbin/projdel euid=0 /usr/sbin/projmod euid=0 # CDDL HEADER START # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # See the License for the specific language governing permissions # and limitations under the License. # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # CDDL HEADER END # # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # # CDDL HEADER END # # Copyright 2007 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # /etc/user_attr # # execution attributes for profiles. see user_attr(4) # #ident "@(#)user_attr 1.2 07/11/14 SMI" # # adm::::profiles=Log Management dladm::::auths=solaris.smf.manage.wpa,solaris.smf.modify lp::::profiles=Printer Management postgres::::type=role;profiles=Postgres Administration,All root::::auths=solaris.*,solaris.grant;profiles=Web Console Management,All;lock_after_retries=no;min_label=admin_low;clearance=admin_high sponix::::type=normal;profiles=Apache 22 Administration,Application Server Management,Basic Solaris User,Desktop Configuration,File System Management,File System Security,FTP Management,IP Filter Management,Mail Management,Maintenance and Repair,Media Backup,Media Restore,MySql 5 Administration,Operator,Postgres Administration,Primary Administrator,Rights Delegation,SMB Management,Software Installation,System Administrator