👤
Home Man
Search
Today's Posts
Register

Linux & Unix Commands - Search Man Pages
Man Page or Keyword Search:
Select Section of Man Page:
Select Man Page Repository:

OpenSolaris 2009.06 - man page for profiles (opensolaris section 1)

profiles(1)				  User Commands 			      profiles(1)

NAME
       profiles - print execution profiles for a user

SYNOPSIS
       profiles [-l] [ user ]...

DESCRIPTION
       The  profiles  command  prints on standard output the names of the execution profiles that
       have been assigned to you or to the optionally-specified user or role name. Profiles are a
       bundling  mechanism  used to enumerate the commands and authorizations needed to perform a
       specific function. Along with each listed executable are the process attributes,  such  as
       the effective user and group IDs, with which the process runs when started by a privileged
       command interpreter. The profile shells are pfcsh, pfksh, and pfexec.  See  the	pfexec(1)
       man page. Profiles can contain other profiles defined in prof_attr(4).

       Multiple  profiles  can be combined to construct the appropriate access control. When pro-
       files are assigned, the authorizations are added to the existing set. If the same  command
       appears	in  multiple profiles, the first occurrence, as determined by the ordering of the
       profiles, is used for process-attribute settings. For convenience,  a  wild  card  can  be
       specified to match all commands.

       When  profiles  are  interpreted,  the  profile	list  is loaded from user_attr(4). If any
       default profile is defined in /etc/security/policy.conf (see policy.conf(4)), the list  of
       default	profiles  are  added  to  the  list loaded from user_attr(4). Matching entries in
       prof_attr(4) provide the authorizations list, and matching entries in exec_attr(4) provide
       the commands list.

OPTIONS
       The following options are supported:

       -l    Lists  the  commands in each profile followed by the special process attributes such
	     as user and group IDs.

EXAMPLES
       Example 1 Sample Output

       The output of the profiles command has the following form:

	 example% profiles tester01 tester02tester01 : Audit Management, All Commands
	 tester02 : Device Management, All Commands
	 example%

       Example 2 Using the list Option

	 example% profiles -l tester01 tester02tester01 :
	     Audit Management:
	       /usr/sbin/audit		euid=root
	       /usr/sbin/auditconfig	euid=root    egid=sys
	     All Commands:
	       *
	 tester02 :
	     Device Management:
	       /usr/bin/allocate:	euid=root
	       /usr/bin/deallocate:	euid=root
	     All Commands
	       *
	 example%

EXIT STATUS
       The following exit values are returned:

       0     Successful completion.

       1     An error occurred.

FILES
       /etc/security/exec_attr

       /etc/security/prof_attr

       /etc/user_attr

       /etc/security/policy.conf

ATTRIBUTES
       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWcsu			   |
       +-----------------------------+-----------------------------+

SEE ALSO
       auths(1),  pfexec(1),   roles(1),   getprofattr(3SECDB),   exec_attr(4),   policy.conf(4),
       prof_attr(4), user_attr(4), attributes(5)

SunOS 5.11				   11 Feb 2000				      profiles(1)


All times are GMT -4. The time now is 05:29 AM.

Unix & Linux Forums Content Copyrightę1993-2018. All Rights Reserved.
×
UNIX.COM Login
Username:
Password:  
Show Password





Not a Forum Member?
Forgot Password?