Assigning proc_owner privilege to particular user in RBAC Post: 303036225

Sponsored Content

Operating Systems Solaris Assigning proc_owner privilege to particular user in RBAC Post 303036225 by jim mcnamara on Wednesday 19th of June 2019 02:20:59 PM

06-19-2019

Registered User

I do not think there is a "group_proc" privilege. You are going to have to set up sudo and and specifically allow those users to become the user that runs the application. But then they can "tink" with the application process.

sudo -
man pages section 1M: System Administration Commands It is part of Solaris 11.

Suppose the app runs with appuser. sudo su - appuser is the command they would use. I assume they are already in the same group as appuser. Let's call that group "foo"

You will have read up on sudoedit and /etc/sudoers You grant the permission to become "appuser" based on the fact that they are only in the special group I mentioned, "foo". Actually appuser does not have to be in the "foo" group, but then you open up access to anything that appuser can do in its own group to these newcomers.

jim mcnamara

View Public Profile for jim mcnamara

Find all posts by jim mcnamara

9 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Write privilege for user

Is it possible to grant write privileges to a user on a directory with out having to add the user to a group or make the user the owner of the directory? My background is in Windows and in Windows you can grant specific privileges to a user without having to put the user in a group or making the...

2. UNIX for Advanced & Expert Users

RBAC: create a user to shut the server

Hi, I have created a user to shutdown the server using RBAC. Here are my steps: 1. roleadd -u 1000 -g 10 -d /home/stopsys -m stopsys 2. passwd stopsys 3. edit /etc/security/prof_attr to include: Shut:::able to shut the server: 4. modrole -P Shut stopsys 5. useradd -u 1001 -g 10 -d...

3. AIX

[Help] Give privilege to an ordinary user

I'm trying to give a non-root user the right to start IBM HTTP Server, the web server is listening on port 80, but for AIX, ports under 1024 are privilege ports which can be used only by root. /usr/IBMIHS/bin# ./apachectl start (13)Permission denied: make_sock: could not bind to address :::80...

4. Linux

Sudo user vs RBAC

Hi all, What the difference between the sudo users & RBAC when the talk of effects after doing the above comes??? any differences between them ,kindly list ??

5. Solaris

Root privilege for user

Can anyone please tell how to give root privilege to a normal user in solaris 10?

6. UNIX for Dummies Questions & Answers

How to create/restrict a user with to have no privilege from other group

Hello experts I am new to Unix. Env : HPUX I need to create a user say testuser such that it does not have access to file/directories from the other group i.e the last 3 digits . How do I do that. Reason for such a request :- I have an existing user oracle which has default umask...

7. AIX

User Privilege

How to assign superuser privilege to an ordinary user temporarily

8. AIX

sudo - User privilege specification

I am planning to implement sudo for users. Under , it looks I have to put the users who need to have sudo access: What are the recommended for users? I don't think I need to give the ALL privilege (i.e ) to AIX users. I'd like to know the commonly used privilege specification for sudo...

9. Shell Programming and Scripting

Create user with different privilege

Hi , I want to create 3 different user with below privilege in Solaris and Linux. 1) Read Only 2)Read and Write Only 3) Admin user Can you guys help me on this .

LEARN ABOUT HPUX

priv_getbyname

priv_getbyname(3)					     Library Functions Manual						 priv_getbyname(3)

NAME

       priv_getbyname() - convert privilege name to privilege ID

SYNOPSIS


   Parameters
       priv_name      pointer to the string containing the privilege name.

DESCRIPTION

       converts the external (string) representation of the privilege name to the internal (numeric) privilege representation.

RETURN VALUE

       returns the following values:

	      Successful completion.
		     The value of the privilege ID is returned.

	      Function failed.
		     is set to indicate the error.

ERRORS

       sets to the following value if the corresponding condition occurs.

       Invalid privilege name.

EXAMPLES

	      #include <sys/privileges.h>
	      #include <sys/types.h>

	      main()
	      {
		      priv_t privid;
		      char *privname = "SYSNFS";

		      privid = priv_getbyname(privname);
		      if (privid == -1) {
			      printf("
Error getting privilege ID
");
		      } else {
			      printf("
Privilege ID : %d
",privid);
		      }
	      }

SEE ALSO

       priv_getbynum(3), priv_set_to_str(3), priv_str_to_set(3), privileges(5).

																 priv_getbyname(3)