|
Hopefully, this page is exactly what you are looking for, but if not, you can always find further assistance on Unix/Linux Forum!
User Commands profiles(1)
NAME
profiles - print execution profiles for a user
SYNOPSIS
profiles [-l] [ user ...]
DESCRIPTION
The profiles command prints on standard output the names of
the execution profiles that have been assigned to you or to
the optionally-specified user or role name. Profiles are a
bundling mechanism used to enumerate the commands and
authorizations needed to perform a specific function. Along
with each listed executable are the process attributes, such
as the effective user and group IDs, with which the process
runs when started by a privileged command interpreter. The
profile shells are pfcsh, pfksh, and pfexec. See the
pfexec(1) man page. Profiles can contain other profiles
defined in prof_attr(4).
Multiple profiles can be combined to construct the appropri-
ate access control. When profiles are assigned, the authori-
zations are added to the existing set. If the same command
appears in multiple profiles, the first occurrence, as
determined by the ordering of the profiles, is used for
process-attribute settings. For convenience, a wild card can
be specified to match all commands.
When profiles are interpreted, the profile list is loaded
from user_attr(4). If any default profile is defined in
/etc/security/policy.conf (see policy.conf(4)), the list of
default profiles are added to the list loaded from
user_attr(4). Matching entries in prof_attr(4) provide the
authorizations list, and matching entries in exec_attr(4)
provide the commands list.
OPTIONS
The following options are supported:
-l Lists the commands in each profile followed by the
special process attributes such as user and group
IDs.
EXAMPLES
Example 1: Sample Output
The output of the profiles command has the following form:
example% profiles tester01 tester02
tester01 : Audit Management, All Commands
SunOS 5.10 Last change: 11 Feb 2000 1
User Commands profiles(1)
tester02 : Device Management, All Commands
example%
Example 2: Using the list Option
example% profiles -l tester01 tester02
tester01 :
Audit Management:
/usr/sbin/audit euid=root
/usr/sbin/auditconfig euid=root egid=sys
All Commands:
*
tester02 :
Device Management:
/usr/bin/allocate: euid=root
/usr/bin/deallocate: euid=root
All Commands
*
example%
EXIT STATUS
The following exit values are returned:
0 Successful completion.
1 An error occurred.
FILES
/etc/security/exec_attr
/etc/security/prof_attr
/etc/user_attr
/etc/security/policy.conf
ATTRIBUTES
See attributes(5) for descriptions of the following attri-
butes:
____________________________________________________________
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
|_____________________________|_____________________________|
| Availability | SUNWcsu |
|_____________________________|_____________________________|
SunOS 5.10 Last change: 11 Feb 2000 2
User Commands profiles(1)
SEE ALSO
auths(1), pfexec(1), roles(1), getprofattr(3SECDB),
exec_attr(4), policy.conf(4), prof_attr(4), user_attr(4),
attributes(5)
SunOS 5.10 Last change: 11 Feb 2000 3
Man(1) output converted with
man2html and wrapped by fishsponge
This page was generated on Wed Sep 12 11:25:17 GMT 2007
|
Your favourite pages:
No pages logged yet. Trying to save cookie... Top 10 most popular pages:
CPAN man page (4210 hits) (Suse Linux 10.1)
ssh man page (4117 hits) (Suse Linux 10.1)
svn man page (2480 hits) (FreeBSD 6.2)
adv_cap_autoneg man page (1782 hits) (Solaris 10 11_06)
startproc man page (1711 hits) (Suse Linux 10.1)
sqlite3 man page (1663 hits) (openSUSE 10.2)
signal man page (1393 hits) (Suse Linux 10.1)
pprosetup man page (1241 hits) (Solaris 10 11_06)
netcat man page (1237 hits) (Suse Linux 10.1)
ssh-socks5-proxy-connect man page (1126 hits) (Solaris 10 11_06)
|