privgrp(4)						     Kernel Interfaces Manual							privgrp(4)

NAME

       privgrp() - format of privileged values

SYNOPSIS

DESCRIPTION

       sets  a	mask  of  privileges, and getprivgrp(2) returns an array of structures giving privileged group assignments on a per-group-ID basis
       (see getprivgrp(2)).  associates a kernel capability with a group ID.  This allows subletting of superuser-like privileges to members of  a
       particular group or groups.  The constants and structures needed for these system calls are defined in

       Privileges are as follows:

	      Allows access to the     system call (see rtprio(2)).

	      Allows access to the     system call (see plock(2)).

	      Allows access to the     system calls (see chown(2)).

	      Permits the use of the   system call for setting locks on files open for reading only (see lockf(2)).

	      Permits the use of the   and system calls for changing respectively the real user ID and real group ID of a process (see setuid(2)).

	      Permits the use of the   system  call  for  changing  processor  binding, locality domain binding or launch policy of a process (see
				       mpctl(2)).

	      Allows access to the     and to set POSIX.4 realtime priorities (see rtsched(2)).

	      Permits the use of       for forcing the target process to run serially with other processes that are also  marked  by  this  system
				       call (see serialize(2)).

	      Permits certain administrative operations in the
				       Instant	Capacity (iCAP) product for deactivation and reactivation of processors.  See that product's docu-
				       mentation for more information.

	      Permits certain administrative operations in
				       Process Resource Manager (PRM) product.	See that product's documentation for more information.

	      Allows change to the system pset configuration
				       (see pset_create(2)).

       Privileges are described in a multiword mask.  The value of the for each privilege is interpreted as a bit index (counting from 1).  Thus a
       group ID can have several different privileges associated with it by having different bits ORed into the mask.

       The system is configured with a specified maximum number of groups with special privileges.  defines this maximum.  Of this maximum, one is
       reserved for global privileges (granted to all processes) and the remainder can be assigned to actual group IDs.

       defines the size of the multiword mask used in defining privileges associated with a group ID.

       Privileges are returned to the user from the system call in an array of structures of type The structure associates a multiword mask with a
       group ID.  The privgrp_map structure contains the fields:

       where priv_groupno contains the group ID (see setprivgrp(2)), and priv_mask contains the privilege mask associated with priv_groupno.

SEE ALSO

       getprivgrp(1),  setprivgrp(1M), chown(2), getprivgrp(2), lockf(2), mpctl(2), plock(2), pset_create(2), rtprio(2), rtsched(2), serialize(2),
       setgid(2), setuid(2), shmctl(2).

																	privgrp(4)