Visit Our UNIX and Linux User Community

Linux and UNIX Man Pages

Test Your Knowledge in Computers #35
Difficulty: Easy
The IP address 127.0.0.1 is also called 'localhost'.
True or False?
Linux & Unix Commands - Search Man Pages

cmdprivadm(1m) [hpux man page]

cmdprivadm(1M)															    cmdprivadm(1M)

NAME
cmdprivadm - noninteractive editing of a command's authorization and privilege information in the privrun database SYNOPSIS
DESCRIPTION
is a noninteractive command that allows user with appropriate permission to add or delete a command and its privileges in the Role-Base Access Control (RBAC) database, See privrun(1M) for more details on this file. When adding a line to the database, sets fields that are not specified a default value. When deleting a line, the lines matching all the given pairs will be deleted. That is, if all fields specified match, the entry will be deleted. Appends a line as specified in pairs in the file. Deletes a line as specified in pairs from file. HP recommends that only the and commands be used to edit and view the RBAC databases; do not edit the RBAC files directly. See rbac(5) for information on the RBAC databases. Options The following options are valid pairs for command should include the full path name of the command. There can be one or more arguments following the command. filename should specify the full path name of a file name. Specifies the operation. Specifies the object. Specifies the real user ID (ruid). Specifies the effective user ID (euid). Specifies the real group ID (rgid). Specifies the effective group ID (egid). Specifies the compartment. Specifies the privileges. Specifies the PAM service name to reauthenticate under. See pam.conf(4) for a list of PAM services. Specifies the flags. Note: You must enclose values that contain the space character, or any characters that may be interpreted by the shell, with single quotes. For example, if the has one or more arguments, enclose them with single quotes: Authorizations: In order to invoke the user must either be root, (running with effective UID of 0), or have the appropriate authorizations. The following is a list of the required authorizations for running with particular options: Allows user to run with options. Allows user to run with options. EXTERNAL INFLUENCES
Environment Variables determines the language in which messages are displayed. International Code Set Support Single-byte character code set is supported. RETURN VALUE
Upon completion, returns one of the following values: Success. Failure. An appropriate error message is printed on standard error. EXAMPLES
The following commands add entries into the file: The following commands delete entries from the file: FILES
Database containing valid definitions of all roles. Database containing definitions of all valid authorizations. Database specifying the roles allowed for each specified user. Database defining the authorizations for each specified role. Database containing the authorization to execute specified commands, and the privileges to alter UID and GID for command execution. SEE ALSO
authadm(1M), privrun(1M), rbacdbchk(1M), roleadm(1M), rbac(5). cmdprivadm(1M)

Check Out this Related Man Page

roleadm(1M)															       roleadm(1M)

NAME
roleadm - noninteractive editing of role-related information in RBAC databases SYNOPSIS
[comments] [role] DESCRIPTION
is a noninteractive command that allows users with the appropriate authorization to modify and list the role information in and See rbac(5) for information on these RBAC databases. HP recommends that only the and commands be used to edit and view the RBAC databases. Do not edit the RBAC files directly. Options recognizes the following options: Add a role to the system list of valid roles. Appends a line in file with rolename. You can enter an optional comment after the role. Remove a role from the system list of valid roles. If role is present in remove entry. If role is not present, then returns an error code; see Change the name of a role. This option causes a modification of the RBAC databases and replacing each occurrence of oldrolename with newrolename. Assign a role to a user or a group. First verifies that the user is a valid user, and the role is present in the file. When this is the case, the role is appended to the user->role mapping in the file. If user argument has an ampersand at the beginning (such as &users), then it is assumed that what follows after the ampersand is a group name - the ampersand must be shell escaped or put in quotes such as users or "&users". An administrator may specify a default set of roles by assigning roles to the keyword. If a user is not otherwise explicitly assigned roles in the database, he or she will be given roles assigned to the role. Revoke a role from the specified user. If no role is specified, then all roles are revoked for the given user. (The user entry is removed from If user argument has an ampersand at the beginning (such as &users), then it is assumed that what follows after the ampersand is a group name - the amper- sand must be shell escaped or put in quotes such as users or "&users". List user and role information from the RBAC databases, and If neither nor are specified, then list all the users with assigned roles. If is specified, then only the role(s) of the specified user will be listed. If user has an ampersand at the beginning (such as &users), then it is assumed that what follows after the ampersand is a group name - the ampersand must be shell escaped or put in quotes such as users or "&users". If only is specified, then only list the user(s) assigned to the specified role. If both and are specified, then the entry with the user username and role rolename will be listed, if it exists. If the specified user does not exist in the system and there exists the special user, in the database, then the roles listed for the specified user will be those of the user. In the event that there is more than one user defined in the database, the system will recognize only the last one. If is specified, then all the roles in the roles database, will be listed. When is specified, no other argument will be taken by Authorizations In order to invoke the user must either be root, (running with effective uid of 0), or have the appropriate authorization(s). The follow- ing is a list of the required authorizations for running with particular options: hpux.security.access.role.add,* Allows user to run roleadm with "add" option. hpux.security.access.role.delete,* Allows user to run roleadm with "delete" option. hpux.security.access.role.modify,* Allows user to run roleadm with "modify" option. hpux.security.access.role.assign,* Allows user to run roleadm with "assign" option. hpux.security.access.role.revoke,* Allows user to run roleadm with "revoke" option. hpux.security.access.role.list,* Allows user to run roleadm with "list" option. EXTERNAL INFLUENCES
Environment Variables determines the language in which messages are displayed. International Code Set Support Single-byte character code set is supported. RETURN VALUE
Upon completion, returns one of the following values: Success. Failure. An appropiate error message is printed to stderr. EXAMPLES
The following command will append the line to file. The following command will append the line to the file. The following command will delete line in file and other databases. The following command will delete line from the file. The following command will replace role name with in and The following command will append line to file: The following command will remove the line from file: The following command will remove all the roles for user from file: The following command will remove all the roles for group name from file: The following command will list all the roles for user The following command will list all users and groups with role The following command will list entries with user and rolename The following command will list entries with group name The following command will list all the entries in FILES
Database containing valid definitions of all roles. Database containing definitions of all valid authorizations. Database specifying the roles allowed for each specified user. Database that defines the allowed authorization for each specified role. Database containing the authorization to execute specified commands and the privileges to alter uid and gid for command execution. SEE ALSO
authadm(1M), cmdprivadm(1M), privrun(1M), rbacdbchk(1M), rbac(5). roleadm(1M)

Featured Tech Videos