xref: /illumos-gate/usr/src/lib/libsecdb/exec_attr.txt (revision 56e2cc86321ec889bf83a888d902c60d6fb2ef8d)
1#
2# CDDL HEADER START
3#
4# The contents of this file are subject to the terms of the
5# Common Development and Distribution License (the "License").
6# You may not use this file except in compliance with the License.
7#
8# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9# or http://www.opensolaris.org/os/licensing.
10# See the License for the specific language governing permissions
11# and limitations under the License.
12#
13# When distributing Covered Code, include this CDDL HEADER in each
14# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15# If applicable, add the following below this CDDL HEADER, with the
16# fields enclosed by brackets "[]" replaced with your own identifying
17# information: Portions Copyright [yyyy] [name of copyright owner]
18#
19# CDDL HEADER END
20#
21# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
22# Use is subject to license terms.
23#
24# /etc/security/exec_attr
25#
26# execution attributes for profiles. see exec_attr(4)
27#
28#
29All:suser:cmd:::*:
30Audit Control:suser:cmd:::/etc/security/bsmconv:uid=0
31Audit Control:suser:cmd:::/etc/security/bsmunconv:uid=0
32Audit Control:solaris:cmd:::/usr/sbin/audit:privs=sys_audit,file_dac_read,proc_owner
33Audit Control:suser:cmd:::/usr/sbin/audit:euid=0
34Audit Control:suser:cmd:::/usr/sbin/auditconfig:euid=0
35Audit Control:suser:cmd:::/usr/sbin/auditd:uid=0
36Audit Review:suser:cmd:::/usr/sbin/auditreduce:euid=0
37Audit Review:suser:cmd:::/usr/sbin/auditstat:euid=0
38Audit Review:suser:cmd:::/usr/sbin/praudit:euid=0
39Basic Solaris User:solaris:cmd:::/usr/lib/fs/smbfs/mount:privs=sys_mount
40Basic Solaris User:solaris:cmd:::/usr/lib/fs/smbfs/umount:privs=sys_mount
41Contract Observer:solaris:cmd:::/usr/bin/ctwatch:\
42	privs=contract_event,contract_observer
43Cron Management:suser:cmd:::/usr/bin/crontab:euid=0
44Crypto Management:suser:cmd:::/usr/sbin/cryptoadm:euid=0
45Crypto Management:suser:cmd:::/usr/bin/kmfcfg:euid=0
46Crypto Management:suser:cmd:::/usr/sfw/bin/openssl:euid=0
47Crypto Management:suser:cmd:::/usr/sfw/bin/CA.pl:euid=0
48DHCP Management:suser:cmd:::/usr/lib/inet/dhcp/svcadm/dhcpconfig:uid=0
49DHCP Management:suser:cmd:::/usr/lib/inet/dhcp/svcadm/dhtadm:uid=0
50DHCP Management:suser:cmd:::/usr/lib/inet/dhcp/svcadm/pntadm:uid=0
51Device Management:suser:cmd:::/usr/sbin/allocate:uid=0
52Device Management:suser:cmd:::/usr/sbin/add_drv:uid=0
53Device Management:suser:cmd:::/usr/sbin/deallocate:uid=0
54Device Management:suser:cmd:::/usr/sbin/rem_drv:uid=0
55Device Management:suser:cmd:::/usr/sbin/update_drv:uid=0
56Device Security:suser:cmd:::/usr/sbin/add_drv:uid=0
57Device Security:suser:cmd:::/usr/sbin/devfsadm:uid=0
58Device Security:suser:cmd:::/usr/sbin/eeprom:uid=0
59Device Security:solaris:cmd:::/usr/bin/kbd:uid=0;gid=sys
60Device Security:suser:cmd:::/usr/sbin/list_devices:euid=0
61Device Security:suser:cmd:::/usr/sbin/rem_drv:uid=0
62Device Security:suser:cmd:::/usr/sbin/strace:euid=0
63Device Security:suser:cmd:::/usr/sbin/update_drv:uid=0
64Device Security:suser:cmd:::/usr/sbin/add_allocatable:euid=0
65Device Security:suser:cmd:::/usr/sbin/remove_allocatable:euid=0
66FTP Management:suser:cmd:::/usr/sbin/ftpaddhost:uid=0
67FTP Management:suser:cmd:::/usr/sbin/ftpconfig:uid=0
68FTP Management:suser:cmd:::/usr/sbin/ftprestart:euid=0
69FTP Management:suser:cmd:::/usr/sbin/ftpshut:euid=0;egid=sys
70FTP Management:suser:cmd:::/usr/sbin/privatepw:uid=0;egid=sys
71File System Management:solaris:cmd:::/sbin/mount:privs=sys_mount
72File System Management:solaris:cmd:::/sbin/umount:privs=sys_mount
73File System Management:suser:cmd:::/usr/bin/eject:euid=0
74File System Management:suser:cmd:::/usr/bin/mkdir:euid=0
75File System Management:suser:cmd:::/usr/bin/rmdir:euid=0
76File System Management:suser:cmd:::/usr/lib/autofs/automountd:euid=0
77File System Management:suser:cmd:::/usr/lib/fs/autofs/automount:euid=0
78File System Management:suser:cmd:::/usr/lib/fs/nfs/showmount:euid=0
79File System Management:suser:cmd:::/usr/lib/fs/ufs/fsirand:euid=0
80File System Management:suser:cmd:::/usr/lib/fs/ufs/newfs:euid=0
81File System Management:suser:cmd:::/usr/lib/fs/ufs/tunefs:uid=0
82File System Management:suser:cmd:::/usr/sbin/clri:euid=0
83File System Management:suser:cmd:::/usr/sbin/devinfo:euid=0
84File System Management:suser:cmd:::/usr/sbin/dfmounts:euid=0
85File System Management:suser:cmd:::/usr/sbin/dfshares:euid=0
86File System Management:suser:cmd:::/usr/sbin/ff:euid=0
87File System Management:suser:cmd:::/usr/sbin/format:euid=0
88File System Management:suser:cmd:::/usr/sbin/fsck:euid=0
89File System Management:suser:cmd:::/usr/sbin/fsdb:euid=0
90File System Management:suser:cmd:::/usr/sbin/fstyp:euid=0
91File System Management:suser:cmd:::/usr/sbin/fuser:euid=0
92File System Management:solaris:cmd:::/usr/sbin/iscsiadm:euid=0;privs=basic
93File System Management:solaris:cmd:::/usr/sbin/iscsitadm:euid=0;privs=basic
94File System Management:suser:cmd:::/usr/sbin/mkfile:euid=0
95File System Management:suser:cmd:::/usr/sbin/mkfs:euid=0
96File System Management:suser:cmd:::/usr/sbin/mount:uid=0
97File System Management:suser:cmd:::/usr/sbin/mountall:uid=0
98File System Management:solaris:cmd:::/usr/sbin/mpathadm:privs=sys_devices
99File System Management:solaris:cmd:::/usr/sbin/quotacheck:uid=0;gid=sys
100File System Management:solaris:cmd:::/usr/sbin/quotaoff:uid=0;gid=sys
101File System Management:solaris:cmd:::/usr/sbin/quotaon:uid=0;gid=sys
102File System Management:solaris:cmd:::/usr/sbin/raidctl:privs=sys_config,sys_devices;euid=0
103File System Management:suser:cmd:::/usr/sbin/ramdiskadm:euid=0
104File System Management:solaris:cmd:::/usr/sbin/sbdadm:privs=sys_devices
105File System Management:suser:cmd:::/usr/sbin/share:uid=0;gid=root
106File System Management:suser:cmd:::/usr/sbin/sharemgr:uid=0;gid=root
107File System Management:suser:cmd:::/usr/sbin/shareall:uid=0;gid=root
108File System Management:solaris:cmd:::/usr/sbin/stmfadm:privs=sys_devices
109File System Management:suser:cmd:::/usr/sbin/swap:euid=0
110File System Management:suser:cmd:::/usr/sbin/umount:uid=0
111File System Management:suser:cmd:::/usr/sbin/umountall:uid=0
112File System Management:suser:cmd:::/usr/sbin/unshare:uid=0;gid=root
113File System Management:suser:cmd:::/usr/sbin/unshareall:uid=0;gid=root
114IP Filter Management:solaris:cmd:::/usr/sbin/ipf:privs=sys_ip_config
115IP Filter Management:solaris:cmd:::/usr/sbin/ipfs:privs=sys_ip_config
116IP Filter Management:solaris:cmd:::/usr/sbin/ipmon:privs=sys_ip_config
117IP Filter Management:solaris:cmd:::/usr/sbin/ipfstat:privs=sys_ip_config;gid=sys
118IP Filter Management:solaris:cmd:::/usr/sbin/ipnat:privs=sys_ip_config;gid=sys
119IP Filter Management:solaris:cmd:::/usr/sbin/ippool:privs=sys_ip_config;gid=sys
120Kerberos Server Management:solaris:cmd:::/usr/lib/krb5/krb5kdc:uid=0
121Kerberos Server Management:solaris:cmd:::/usr/lib/krb5/kadmind:uid=0
122Kerberos Server Management:solaris:cmd:::/usr/lib/krb5/kprop:euid=0;privs=none
123Kerberos Server Management:solaris:cmd:::/usr/sbin/kadmin.local:euid=0;privs=none
124Kerberos Server Management:solaris:cmd:::/usr/sbin/kdb5_util:euid=0;privs=none
125Kerberos Server Management:solaris:cmd:::/usr/sbin/kdb5_ldap_util:euid=0;privs=none
126Kerberos Server Management:solaris:cmd:::/usr/sbin/kdcmgr:euid=0;privs=none
127Kerberos Client Management:solaris:cmd:::/usr/bin/klist:euid=0;privs=file_dac_read
128Kerberos Client Management:solaris:cmd:::/usr/sbin/kadmin:euid=0;privs=none
129Kerberos Client Management:solaris:cmd:::/usr/sbin/kclient:euid=0;privs=none
130Log Management:suser:cmd:::/usr/sbin/logadm:euid=0
131Mail Management:suser:cmd:::/usr/lib/sendmail:uid=0
132Mail Management:suser:cmd:::/usr/sbin/editmap:euid=0
133Mail Management:suser:cmd:::/usr/sbin/makemap:euid=0
134Mail Management:suser:cmd:::/usr/sbin/newaliases:euid=0
135Maintenance and Repair:solaris:cmd:::/usr/bin/mdb:privs=all
136Maintenance and Repair:suser:cmd:::/usr/bin/mdb:euid=0
137Maintenance and Repair:solaris:cmd:::/usr/bin/coreadm:euid=0;privs=proc_owner
138Maintenance and Repair:suser:cmd:::/usr/bin/date:euid=0
139Maintenance and Repair:suser:cmd:::/usr/bin/ldd:euid=0
140Maintenance and Repair:suser:cmd:::/usr/bin/vmstat:euid=0
141Maintenance and Repair:suser:cmd:::/usr/sbin/eeprom:euid=0
142Maintenance and Repair:suser:cmd:::/usr/sbin/halt:euid=0
143Maintenance and Repair:suser:cmd:::/sbin/init:uid=0
144Maintenance and Repair:solaris:cmd:::/usr/sbin/pcitool:privs=all
145Maintenance and Repair:suser:cmd:::/usr/sbin/poweroff:uid=0
146Maintenance and Repair:suser:cmd:::/usr/sbin/prtconf:euid=0
147Maintenance and Repair:suser:cmd:::/usr/sbin/reboot:uid=0
148Maintenance and Repair:suser:cmd:::/usr/sbin/syslogd:euid=0
149Maintenance and Repair:suser:cmd:::/sbin/bootadm:euid=0
150Maintenance and Repair:solaris:cmd:::/usr/sbin/ucodeadm:privs=all
151Media Backup:suser:cmd:::/usr/bin/mt:euid=0
152Media Backup:suser:cmd:::/usr/lib/fs/ufs/ufsdump:euid=0;gid=sys
153Media Backup:suser:cmd:::/usr/sbin/tar:euid=0
154Media Catalog:solaris:cmd:::/usr/bin/bart:\
155	privs=file_dac_read,file_dac_search
156Media Restore:suser:cmd:::/usr/bin/cpio:euid=0
157Media Restore:suser:cmd:::/usr/bin/mt:euid=0
158Media Restore:suser:cmd:::/usr/lib/fs/ufs/ufsrestore:euid=0
159Media Restore:suser:cmd:::/usr/sbin/tar:euid=0
160MMS Administrator:solaris:cmd:::/usr/bin/mmsinit:uid=0
161MMS Administrator:solaris:cmd:::/usr/bin/mmsadm:uid=0
162MMS Operator:solaris:cmd:::/usr/bin/mmsadm:uid=0;privs=file_dac_read
163MMS User:solaris:cmd:::/usr/bin/mmsmnt:uid=0;privs=file_dac_read
164Name Service Management:suser:cmd:::/usr/bin/nischttl:euid=0
165Name Service Management:suser:cmd:::/usr/bin/nisln:euid=0
166Name Service Management:suser:cmd:::/usr/lib/nis/nisctl:euid=0
167Name Service Management:suser:cmd:::/usr/lib/nis/nisping:euid=0
168Name Service Management:suser:cmd:::/usr/lib/nis/nisshowcache:euid=0
169Name Service Management:suser:cmd:::/usr/lib/nis/nisstat:euid=0
170Name Service Management:suser:cmd:::/usr/sbin/nscd:euid=0
171Name Service Security:suser:cmd:::/usr/bin/chkey:euid=0
172Name Service Security:suser:cmd:::/usr/bin/nisaddcred:euid=0
173Name Service Security:suser:cmd:::/usr/bin/nischgrp:euid=0
174Name Service Security:suser:cmd:::/usr/bin/nischmod:euid=0
175Name Service Security:suser:cmd:::/usr/bin/nischown:euid=0
176Name Service Security:suser:cmd:::/usr/bin/nisgrpadm:euid=0
177Name Service Security:suser:cmd:::/usr/bin/nismkdir:euid=0
178Name Service Security:suser:cmd:::/usr/bin/nispasswd:euid=0
179Name Service Security:suser:cmd:::/usr/bin/nisrm:euid=0
180Name Service Security:suser:cmd:::/usr/bin/nisrmdir:euid=0
181Name Service Security:suser:cmd:::/usr/bin/nistbladm:euid=0
182Name Service Security:suser:cmd:::/usr/lib/nis/nisaddent:euid=0
183Name Service Security:suser:cmd:::/usr/lib/nis/nisclient:uid=0
184Name Service Security:suser:cmd:::/usr/lib/nis/nispopulate:euid=0
185Name Service Security:suser:cmd:::/usr/lib/nis/nisserver:uid=0
186Name Service Security:suser:cmd:::/usr/lib/nis/nissetup:euid=0
187Name Service Security:suser:cmd:::/usr/lib/nis/nisupdkeys:euid=0
188Name Service Security:suser:cmd:::/usr/sbin/ldapclient:uid=0
189Name Service Security:suser:cmd:::/usr/sbin/newkey:euid=0
190Name Service Security:suser:cmd:::/usr/sbin/nisinit:euid=0
191Name Service Security:suser:cmd:::/usr/sbin/nislog:euid=0
192Name Service Security:suser:cmd:::/usr/sbin/rpc.nisd:uid=0;gid=0
193Network Management:solaris:cmd:::/sbin/ifconfig:uid=0
194Network Management:solaris:cmd:::/sbin/route:privs=sys_ip_config
195Network Management:solaris:cmd:::/sbin/routeadm:euid=0;\
196	privs=proc_chroot,proc_owner,sys_ip_config
197Network Management:solaris:cmd:::/sbin/dladm:euid=dladm;egid=sys;\
198	privs=sys_dl_config,net_rawaccess,proc_audit
199Network Management:solaris:cmd:::/sbin/flowadm:euid=dladm;egid=sys;\
200	privs=sys_dl_config,net_rawaccess,proc_audit
201Network Management:suser:cmd:::/usr/bin/netstat:uid=0
202Network Management:suser:cmd:::/usr/bin/rup:euid=0
203Network Management:suser:cmd:::/usr/bin/ruptime:euid=0
204Network Management:suser:cmd:::/usr/bin/setuname:euid=0
205Network Management:suser:cmd:::/usr/sbin/asppp2pppd:euid=0
206Network Management:suser:cmd:::/usr/sbin/ifconfig:uid=0
207Network Management:suser:cmd:::/usr/sbin/ipaddrsel:euid=0
208Network Management:suser:cmd:::/usr/sbin/ipqosconf:euid=0
209Network Management:suser:cmd:::/usr/sbin/rndc:privs=file_dac_read
210Network Management:suser:cmd:::/usr/sbin/route:uid=0
211Network Management:suser:cmd:::/usr/sbin/snoop:uid=0
212Network Management:solaris:cmd:::/usr/sbin/snoop:privs=net_observability
213Network Management:suser:cmd:::/usr/sbin/spray:euid=0
214Network Observability:solaris:cmd:::/usr/sbin/snoop:privs=net_observability
215Network Link Security:solaris:cmd:::/sbin/dladm:euid=dladm;egid=sys;\
216	privs=sys_dl_config,net_rawaccess,proc_audit
217Network IPsec Management:solaris:cmd:::/usr/lib/inet/certdb:euid=0;privs=none
218Network IPsec Management:solaris:cmd:::/usr/lib/inet/certlocal:euid=0;privs=none
219Network IPsec Management:solaris:cmd:::/usr/lib/inet/certrldb:euid=0;privs=none
220Network IPsec Management:solaris:cmd:::/usr/lib/inet/in.iked:euid=0
221Network IPsec Management:solaris:cmd:::/usr/sbin/ikeadm:euid=0;privs=file_dac_write
222Network IPsec Management:solaris:cmd:::/usr/sbin/ikecert:euid=0;privs=none
223Network IPsec Management:solaris:cmd:::/usr/sbin/ipsecconf:euid=0;privs=sys_ip_config
224Network IPsec Management:solaris:cmd:::/usr/sbin/ipseckey:uid=0;privs=sys_ip_config
225Network IPsec Management:solaris:cmd:::/usr/sbin/ipsecalgs:privs=sys_ip_config
226Network IPsec Management:suser:cmd:::/usr/lib/inet/certdb:euid=0
227Network IPsec Management:suser:cmd:::/usr/lib/inet/certlocal:euid=0
228Network IPsec Management:suser:cmd:::/usr/lib/inet/certrldb:euid=0
229Network IPsec Management:suser:cmd:::/usr/lib/inet/in.iked:euid=0
230Network IPsec Management:suser:cmd:::/usr/sbin/ikeadm:euid=0
231Network IPsec Management:suser:cmd:::/usr/sbin/ikecert:euid=0
232Network IPsec Management:suser:cmd:::/usr/sbin/ipsecconf:euid=0
233Network IPsec Management:suser:cmd:::/usr/sbin/ipseckey:uid=0
234Network IPsec Management:suser:cmd:::/usr/sbin/ipsecalgs:euid=0
235Network Security:solaris:cmd:::/usr/sbin/ksslcfg:euid=0
236Network Security:suser:cmd:::/usr/bin/ssh-keygen:uid=0;gid=sys
237Object Access Management:solaris:cmd:::/usr/bin/chgrp:privs=file_chown
238Object Access Management:solaris:cmd:::/usr/bin/chmod:privs=file_owner
239Object Access Management:solaris:cmd:::/usr/bin/chown:privs=file_chown
240Object Access Management:solaris:cmd:::/usr/bin/setfacl:privs=file_owner
241Object Access Management:suser:cmd:::/usr/bin/chgrp:euid=0
242Object Access Management:suser:cmd:::/usr/bin/chmod:euid=0
243Object Access Management:suser:cmd:::/usr/bin/chown:euid=0
244Object Access Management:suser:cmd:::/usr/bin/getfacl:euid=0
245Object Access Management:suser:cmd:::/usr/bin/setfacl:euid=0
246Printer Management:suser:cmd:::/usr/lib/lp/local/lpadmin:uid=lp;gid=lp
247Printer Management:suser:cmd:::/usr/sbin/lpfilter:euid=lp;uid=lp
248Printer Management:suser:cmd:::/usr/sbin/lpforms:euid=lp
249Printer Management:suser:cmd:::/usr/sbin/lpusers:euid=lp
250Printer Management:suser:cmd:::/usr/sbin/ppdmgr:euid=0
251Process Management:solaris:cmd:::/usr/bin/kill:privs=proc_owner
252Process Management:solaris:cmd:::/usr/bin/nice:privs=proc_owner,proc_priocntl
253Process Management:solaris:cmd:::/usr/bin/pcred:privs=proc_owner
254Process Management:solaris:cmd:::/usr/bin/pfiles:privs=proc_owner
255Process Management:solaris:cmd:::/usr/bin/pflags:privs=proc_owner
256Process Management:solaris:cmd:::/usr/bin/ppriv:privs=proc_owner
257Process Management:solaris:cmd:::/usr/bin/renice:privs=proc_owner,proc_priocntl
258Process Management:suser:cmd:::/usr/bin/crontab:euid=0
259Process Management:suser:cmd:::/usr/bin/kill:euid=0
260Process Management:suser:cmd:::/usr/bin/nice:euid=0
261Process Management:suser:cmd:::/usr/bin/pcred:euid=0
262Process Management:suser:cmd:::/usr/bin/pfiles:euid=0
263Process Management:suser:cmd:::/usr/bin/pflags:euid=0
264Process Management:suser:cmd:::/usr/bin/pldd:euid=0
265Process Management:suser:cmd:::/usr/bin/pmap:euid=0
266Process Management:suser:cmd:::/usr/bin/prun:euid=0
267Process Management:suser:cmd:::/usr/bin/ps:euid=0
268Process Management:suser:cmd:::/usr/bin/psig:euid=0
269Process Management:suser:cmd:::/usr/bin/pstack:euid=0
270Process Management:suser:cmd:::/usr/bin/pstop:euid=0
271Process Management:suser:cmd:::/usr/bin/ptime:euid=0
272Process Management:suser:cmd:::/usr/bin/ptree:euid=0
273Process Management:suser:cmd:::/usr/bin/pwait:euid=0
274Process Management:suser:cmd:::/usr/bin/pwdx:euid=0
275Process Management:suser:cmd:::/usr/bin/renice:euid=0
276Process Management:suser:cmd:::/usr/bin/truss:euid=0
277Process Management:suser:cmd:::/usr/sbin/fuser:euid=0
278Process Management:solaris:cmd:::/usr/sbin/rcapadm:uid=0
279Project Management:solaris:cmd:::/usr/sbin/projadd:euid=0
280Project Management:solaris:cmd:::/usr/sbin/projmod:euid=0
281Project Management:solaris:cmd:::/usr/sbin/projdel:euid=0
282Software Installation:suser:cmd:::/usr/bin/ln:euid=0
283Software Installation:suser:cmd:::/usr/bin/pkginfo:uid=0
284Software Installation:suser:cmd:::/usr/bin/pkgmk:uid=0
285Software Installation:suser:cmd:::/usr/bin/pkgparam:uid=0
286Software Installation:suser:cmd:::/usr/bin/pkgproto:uid=0
287Software Installation:suser:cmd:::/usr/bin/pkgtrans:uid=0
288Software Installation:suser:cmd:::/usr/ccs/bin/make:euid=0
289Software Installation:suser:cmd:::/usr/sbin/install:euid=0
290Software Installation:suser:cmd:::/usr/sbin/pkgadd:uid=0;gid=bin
291Software Installation:suser:cmd:::/usr/sbin/pkgask:uid=0
292Software Installation:suser:cmd:::/usr/sbin/pkgchk:uid=0
293Software Installation:suser:cmd:::/usr/sbin/pkgrm:uid=0;gid=bin
294System Event Management:suser:cmd:::/usr/sbin/syseventadm:uid=0
295User Management:suser:cmd:::/usr/sbin/grpck:euid=0
296User Management:suser:cmd:::/usr/sbin/pwck:euid=0
297User Management:solaris:cmd:::/usr/sbin/useradd:euid=0
298User Management:solaris:cmd:::/usr/sbin/userdel:euid=0
299User Management:solaris:cmd:::/usr/sbin/usermod:euid=0
300User Management:solaris:cmd:::/usr/sbin/roleadd:euid=0
301User Management:solaris:cmd:::/usr/sbin/roledel:euid=0
302User Management:solaris:cmd:::/usr/sbin/rolemod:euid=0
303User Management:solaris:cmd:::/usr/sbin/groupadd:uid=0
304User Management:solaris:cmd:::/usr/sbin/groupdel:uid=0
305User Management:solaris:cmd:::/usr/sbin/groupmod:uid=0
306User Security:suser:cmd:::/usr/bin/passwd:uid=0
307User Security:solaris:cmd:::/usr/sbin/passmgmt:uid=0
308User Security:suser:cmd:::/usr/sbin/pwck:euid=0
309User Security:suser:cmd:::/usr/sbin/pwconv:euid=0
310DAT Administration:solaris:cmd:::/usr/sbin/datadm:euid=0
311ZFS File System Management:solaris:cmd:::/sbin/zfs:euid=0
312ZFS Storage Management:solaris:cmd:::/sbin/zpool:uid=0
313ZFS Storage Management:solaris:cmd:::/usr/lib/zfs/availdevs:uid=0
314Zone Management:solaris:cmd:::/usr/sbin/txzonemgr:uid=0
315Zone Management:solaris:cmd:::/usr/sbin/zonecfg:uid=0
316Zone Management:solaris:cmd:::/usr/sbin/zoneadm:uid=0
317Zone Management:solaris:cmd:::/usr/sbin/zlogin:uid=0
318acctadm:solaris:cmd:::/usr/sbin/acctadm:euid=0;egid=0;privs=sys_acct,file_dac_write
319