xref: /illumos-gate/usr/src/lib/libsecdb/help/profiles/RtAll.html (revision f5c2e7ea56aaa46a9976476fb0cb1f02b9426f07)
1<HTML>
2<!--
3    CDDL HEADER START
4
5    The contents of this file are subject to the terms of the
6    Common Development and Distribution License, Version 1.0 only
7    (the "License").  You may not use this file except in compliance
8    with the License.
9
10    You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
11    or http://www.opensolaris.org/os/licensing.
12    See the License for the specific language governing permissions
13    and limitations under the License.
14
15    When distributing Covered Code, include this CDDL HEADER in each
16    file and include the License file at usr/src/OPENSOLARIS.LICENSE.
17    If applicable, add the following below this CDDL HEADER, with the
18    fields enclosed by brackets "[]" replaced with your own identifying
19    information: Portions Copyright [yyyy] [name of copyright owner]
20
21    CDDL HEADER END
22
23-- Copyright 2000 Sun Microsystems, Inc.  All rights reserved.
24-- Use is subject to license terms.
25-->
26<HEAD>
27	<TITLE> </TITLE>
28
29
30</HEAD>
31<BODY>
32<!-- ident	"%Z%%M%	%I%	%E% SMI" -->
33
34
35When All is in the Rights Included column, it grants the right for a user or role to use any command when working in an administrator's shell, such as the Administrator's Korn or Administrator's C shells.
36<p>
37The normal policy for these shells is that they can only execute commands that have been explicitly assigned to a user (or role) through granted rights. Because using only the granted rights can be very limiting, it is common to give users the All right, which has a wild card entry matching every command.
38<p>
39However, no special process attributes are associated with the wild card, so the effect is that all commands matching the wild card run with the uid and gid of the current user (or role).
40<p>
41If you assign this right, it should always be last in the list of rights. If it is first, no other rights are consulted when looking up command attributes.
42<p>
43If All is grayed, then you are not entitled to Add or Remove this right.
44</BODY>
45</HTML>
46