xref: /titanic_51/usr/src/lib/libsecdb/exec_attr.txt (revision bd4b27466c66fee40cda59ba4b4923573a87848c)
17c478bd9Sstevel@tonic-gate#
27c478bd9Sstevel@tonic-gate# CDDL HEADER START
37c478bd9Sstevel@tonic-gate#
47c478bd9Sstevel@tonic-gate# The contents of this file are subject to the terms of the
5a38a20b0Stalley# Common Development and Distribution License (the "License").
6a38a20b0Stalley# You may not use this file except in compliance with the License.
77c478bd9Sstevel@tonic-gate#
87c478bd9Sstevel@tonic-gate# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
97c478bd9Sstevel@tonic-gate# or http://www.opensolaris.org/os/licensing.
107c478bd9Sstevel@tonic-gate# See the License for the specific language governing permissions
117c478bd9Sstevel@tonic-gate# and limitations under the License.
127c478bd9Sstevel@tonic-gate#
137c478bd9Sstevel@tonic-gate# When distributing Covered Code, include this CDDL HEADER in each
147c478bd9Sstevel@tonic-gate# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
157c478bd9Sstevel@tonic-gate# If applicable, add the following below this CDDL HEADER, with the
167c478bd9Sstevel@tonic-gate# fields enclosed by brackets "[]" replaced with your own identifying
177c478bd9Sstevel@tonic-gate# information: Portions Copyright [yyyy] [name of copyright owner]
187c478bd9Sstevel@tonic-gate#
197c478bd9Sstevel@tonic-gate# CDDL HEADER END
207c478bd9Sstevel@tonic-gate#
21a2721256SWilliam Young# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
2253ac4dcaSjacobs# Use is subject to license terms.
2353ac4dcaSjacobs#
247c478bd9Sstevel@tonic-gate# /etc/security/exec_attr
257c478bd9Sstevel@tonic-gate#
267c478bd9Sstevel@tonic-gate# execution attributes for profiles. see exec_attr(4)
277c478bd9Sstevel@tonic-gate#
287c478bd9Sstevel@tonic-gate#
297c478bd9Sstevel@tonic-gateAll:suser:cmd:::*:
307c478bd9Sstevel@tonic-gateAudit Control:suser:cmd:::/etc/security/bsmconv:uid=0
317c478bd9Sstevel@tonic-gateAudit Control:suser:cmd:::/etc/security/bsmunconv:uid=0
32cee38678Stz204579Audit Control:solaris:cmd:::/usr/sbin/audit:privs=sys_audit,file_dac_read,proc_owner
337c478bd9Sstevel@tonic-gateAudit Control:suser:cmd:::/usr/sbin/audit:euid=0
347c478bd9Sstevel@tonic-gateAudit Control:suser:cmd:::/usr/sbin/auditconfig:euid=0
357c478bd9Sstevel@tonic-gateAudit Control:suser:cmd:::/usr/sbin/auditd:uid=0
367c478bd9Sstevel@tonic-gateAudit Review:suser:cmd:::/usr/sbin/auditreduce:euid=0
377c478bd9Sstevel@tonic-gateAudit Review:suser:cmd:::/usr/sbin/auditstat:euid=0
387c478bd9Sstevel@tonic-gateAudit Review:suser:cmd:::/usr/sbin/praudit:euid=0
394bff34e3SthurlowBasic Solaris User:solaris:cmd:::/usr/lib/fs/smbfs/mount:privs=sys_mount
404bff34e3SthurlowBasic Solaris User:solaris:cmd:::/usr/lib/fs/smbfs/umount:privs=sys_mount
417c478bd9Sstevel@tonic-gateContract Observer:solaris:cmd:::/usr/bin/ctwatch:\
427c478bd9Sstevel@tonic-gate	privs=contract_event,contract_observer
437c478bd9Sstevel@tonic-gateCron Management:suser:cmd:::/usr/bin/crontab:euid=0
447c478bd9Sstevel@tonic-gateCrypto Management:suser:cmd:::/usr/sbin/cryptoadm:euid=0
45985be8f1SwyllysCrypto Management:suser:cmd:::/usr/bin/kmfcfg:euid=0
467c478bd9Sstevel@tonic-gateCrypto Management:suser:cmd:::/usr/sfw/bin/openssl:euid=0
477c478bd9Sstevel@tonic-gateCrypto Management:suser:cmd:::/usr/sfw/bin/CA.pl:euid=0
487c478bd9Sstevel@tonic-gateDHCP Management:suser:cmd:::/usr/lib/inet/dhcp/svcadm/dhcpconfig:uid=0
497c478bd9Sstevel@tonic-gateDHCP Management:suser:cmd:::/usr/lib/inet/dhcp/svcadm/dhtadm:uid=0
507c478bd9Sstevel@tonic-gateDHCP Management:suser:cmd:::/usr/lib/inet/dhcp/svcadm/pntadm:uid=0
517c478bd9Sstevel@tonic-gateDevice Management:suser:cmd:::/usr/sbin/allocate:uid=0
527c478bd9Sstevel@tonic-gateDevice Management:suser:cmd:::/usr/sbin/add_drv:uid=0
537c478bd9Sstevel@tonic-gateDevice Management:suser:cmd:::/usr/sbin/deallocate:uid=0
547c478bd9Sstevel@tonic-gateDevice Management:suser:cmd:::/usr/sbin/rem_drv:uid=0
557c478bd9Sstevel@tonic-gateDevice Management:suser:cmd:::/usr/sbin/update_drv:uid=0
567c478bd9Sstevel@tonic-gateDevice Security:suser:cmd:::/usr/sbin/add_drv:uid=0
577c478bd9Sstevel@tonic-gateDevice Security:suser:cmd:::/usr/sbin/devfsadm:uid=0
587c478bd9Sstevel@tonic-gateDevice Security:suser:cmd:::/usr/sbin/eeprom:uid=0
597c478bd9Sstevel@tonic-gateDevice Security:solaris:cmd:::/usr/bin/kbd:uid=0;gid=sys
607c478bd9Sstevel@tonic-gateDevice Security:suser:cmd:::/usr/sbin/list_devices:euid=0
617c478bd9Sstevel@tonic-gateDevice Security:suser:cmd:::/usr/sbin/rem_drv:uid=0
627c478bd9Sstevel@tonic-gateDevice Security:suser:cmd:::/usr/sbin/strace:euid=0
637c478bd9Sstevel@tonic-gateDevice Security:suser:cmd:::/usr/sbin/update_drv:uid=0
64f875b4ebSricaDevice Security:suser:cmd:::/usr/sbin/add_allocatable:euid=0
65f875b4ebSricaDevice Security:suser:cmd:::/usr/sbin/remove_allocatable:euid=0
667c478bd9Sstevel@tonic-gateFTP Management:suser:cmd:::/usr/sbin/ftpaddhost:uid=0
677c478bd9Sstevel@tonic-gateFTP Management:suser:cmd:::/usr/sbin/ftpconfig:uid=0
687c478bd9Sstevel@tonic-gateFTP Management:suser:cmd:::/usr/sbin/ftprestart:euid=0
697c478bd9Sstevel@tonic-gateFTP Management:suser:cmd:::/usr/sbin/ftpshut:euid=0;egid=sys
707c478bd9Sstevel@tonic-gateFTP Management:suser:cmd:::/usr/sbin/privatepw:uid=0;egid=sys
717c478bd9Sstevel@tonic-gateFile System Management:solaris:cmd:::/sbin/mount:privs=sys_mount
727c478bd9Sstevel@tonic-gateFile System Management:solaris:cmd:::/sbin/umount:privs=sys_mount
737c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/bin/eject:euid=0
747c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/bin/mkdir:euid=0
757c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/bin/rmdir:euid=0
767c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/lib/autofs/automountd:euid=0
777c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/lib/fs/autofs/automount:euid=0
787c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/lib/fs/nfs/showmount:euid=0
797c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/lib/fs/ufs/fsirand:euid=0
807c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/lib/fs/ufs/newfs:euid=0
817c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/lib/fs/ufs/tunefs:uid=0
827c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/clri:euid=0
837c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/devinfo:euid=0
847c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/dfmounts:euid=0
857c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/dfshares:euid=0
867c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/ff:euid=0
877c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/format:euid=0
887c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/fsck:euid=0
897c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/fsdb:euid=0
907c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/fstyp:euid=0
917c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/fuser:euid=0
92*bd4b2746SRitwik GhoshalFile System Management:solaris:cmd:::/usr/sbin/iscsiadm:euid=0;privs=basic
93*bd4b2746SRitwik GhoshalFile System Management:solaris:cmd:::/usr/sbin/iscsitadm:euid=0;privs=basic
947c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/mkfile:euid=0
957c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/mkfs:euid=0
967c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/mount:uid=0
977c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/mountall:uid=0
98fcf3ce44SJohn ForteFile System Management:solaris:cmd:::/usr/sbin/mpathadm:privs=sys_devices
997c478bd9Sstevel@tonic-gateFile System Management:solaris:cmd:::/usr/sbin/quotacheck:uid=0;gid=sys
1007c478bd9Sstevel@tonic-gateFile System Management:solaris:cmd:::/usr/sbin/quotaoff:uid=0;gid=sys
1017c478bd9Sstevel@tonic-gateFile System Management:solaris:cmd:::/usr/sbin/quotaon:uid=0;gid=sys
102711890bcSjc156560File System Management:solaris:cmd:::/usr/sbin/raidctl:privs=sys_config,sys_devices;euid=0
1037c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/ramdiskadm:euid=0
104fcf3ce44SJohn ForteFile System Management:solaris:cmd:::/usr/sbin/sbdadm:privs=sys_devices
1057c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/share:uid=0;gid=root
1066185db85SdougmFile System Management:suser:cmd:::/usr/sbin/sharemgr:uid=0;gid=root
1077c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/shareall:uid=0;gid=root
108fcf3ce44SJohn ForteFile System Management:solaris:cmd:::/usr/sbin/stmfadm:privs=sys_devices
1097c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/swap:euid=0
1107c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/umount:uid=0
1117c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/umountall:uid=0
1127c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/unshare:uid=0;gid=root
1137c478bd9Sstevel@tonic-gateFile System Management:suser:cmd:::/usr/sbin/unshareall:uid=0;gid=root
114f4b3ec61Sdh155122IP Filter Management:solaris:cmd:::/usr/sbin/ipf:privs=sys_ip_config
115f4b3ec61Sdh155122IP Filter Management:solaris:cmd:::/usr/sbin/ipfs:privs=sys_ip_config
116f4b3ec61Sdh155122IP Filter Management:solaris:cmd:::/usr/sbin/ipmon:privs=sys_ip_config
117f4b3ec61Sdh155122IP Filter Management:solaris:cmd:::/usr/sbin/ipfstat:privs=sys_ip_config;gid=sys
118f4b3ec61Sdh155122IP Filter Management:solaris:cmd:::/usr/sbin/ipnat:privs=sys_ip_config;gid=sys
119f4b3ec61Sdh155122IP Filter Management:solaris:cmd:::/usr/sbin/ippool:privs=sys_ip_config;gid=sys
1207c478bd9Sstevel@tonic-gateKerberos Server Management:solaris:cmd:::/usr/lib/krb5/krb5kdc:uid=0
1217c478bd9Sstevel@tonic-gateKerberos Server Management:solaris:cmd:::/usr/lib/krb5/kadmind:uid=0
1227c478bd9Sstevel@tonic-gateKerberos Server Management:solaris:cmd:::/usr/lib/krb5/kprop:euid=0;privs=none
1237c478bd9Sstevel@tonic-gateKerberos Server Management:solaris:cmd:::/usr/sbin/kadmin.local:euid=0;privs=none
1247c478bd9Sstevel@tonic-gateKerberos Server Management:solaris:cmd:::/usr/sbin/kdb5_util:euid=0;privs=none
12554925bf6SwillfKerberos Server Management:solaris:cmd:::/usr/sbin/kdb5_ldap_util:euid=0;privs=none
1261fceb383SsemeryKerberos Server Management:solaris:cmd:::/usr/sbin/kdcmgr:euid=0;privs=none
1277c478bd9Sstevel@tonic-gateKerberos Client Management:solaris:cmd:::/usr/bin/klist:euid=0;privs=file_dac_read
1287c478bd9Sstevel@tonic-gateKerberos Client Management:solaris:cmd:::/usr/sbin/kadmin:euid=0;privs=none
1297c478bd9Sstevel@tonic-gateKerberos Client Management:solaris:cmd:::/usr/sbin/kclient:euid=0;privs=none
1307c478bd9Sstevel@tonic-gateLog Management:suser:cmd:::/usr/sbin/logadm:euid=0
1317c478bd9Sstevel@tonic-gateMail Management:suser:cmd:::/usr/lib/sendmail:uid=0
1327c478bd9Sstevel@tonic-gateMail Management:suser:cmd:::/usr/sbin/editmap:euid=0
1337c478bd9Sstevel@tonic-gateMail Management:suser:cmd:::/usr/sbin/makemap:euid=0
1347c478bd9Sstevel@tonic-gateMail Management:suser:cmd:::/usr/sbin/newaliases:euid=0
1357c478bd9Sstevel@tonic-gateMaintenance and Repair:solaris:cmd:::/usr/bin/mdb:privs=all
1367c478bd9Sstevel@tonic-gateMaintenance and Repair:suser:cmd:::/usr/bin/mdb:euid=0
137dfac3eb2SDavid PowellMaintenance and Repair:solaris:cmd:::/usr/bin/coreadm:euid=0;privs=proc_owner
1387c478bd9Sstevel@tonic-gateMaintenance and Repair:suser:cmd:::/usr/bin/date:euid=0
1397c478bd9Sstevel@tonic-gateMaintenance and Repair:suser:cmd:::/usr/bin/ldd:euid=0
1407c478bd9Sstevel@tonic-gateMaintenance and Repair:suser:cmd:::/usr/bin/vmstat:euid=0
1417c478bd9Sstevel@tonic-gateMaintenance and Repair:suser:cmd:::/usr/sbin/eeprom:euid=0
1427c478bd9Sstevel@tonic-gateMaintenance and Repair:suser:cmd:::/usr/sbin/halt:euid=0
1431a97e40eSvikramMaintenance and Repair:suser:cmd:::/sbin/init:uid=0
144d5ace945SErwin T TsaurMaintenance and Repair:solaris:cmd:::/usr/sbin/pcitool:privs=all
1457c478bd9Sstevel@tonic-gateMaintenance and Repair:suser:cmd:::/usr/sbin/poweroff:uid=0
1467c478bd9Sstevel@tonic-gateMaintenance and Repair:suser:cmd:::/usr/sbin/prtconf:euid=0
1477c478bd9Sstevel@tonic-gateMaintenance and Repair:suser:cmd:::/usr/sbin/reboot:uid=0
1487c478bd9Sstevel@tonic-gateMaintenance and Repair:suser:cmd:::/usr/sbin/syslogd:euid=0
149ce077e82SvikramMaintenance and Repair:suser:cmd:::/sbin/bootadm:euid=0
1502449e17fSsherrymMaintenance and Repair:solaris:cmd:::/usr/sbin/ucodeadm:privs=all
1517c478bd9Sstevel@tonic-gateMedia Backup:suser:cmd:::/usr/bin/mt:euid=0
1527c478bd9Sstevel@tonic-gateMedia Backup:suser:cmd:::/usr/lib/fs/ufs/ufsdump:euid=0;gid=sys
1537c478bd9Sstevel@tonic-gateMedia Backup:suser:cmd:::/usr/sbin/tar:euid=0
154a2721256SWilliam YoungMedia Catalog:solaris:cmd:::/usr/bin/bart:\
155a2721256SWilliam Young	privs=file_dac_read,file_dac_search
1567c478bd9Sstevel@tonic-gateMedia Restore:suser:cmd:::/usr/bin/cpio:euid=0
1577c478bd9Sstevel@tonic-gateMedia Restore:suser:cmd:::/usr/bin/mt:euid=0
1587c478bd9Sstevel@tonic-gateMedia Restore:suser:cmd:::/usr/lib/fs/ufs/ufsrestore:euid=0
1597c478bd9Sstevel@tonic-gateMedia Restore:suser:cmd:::/usr/sbin/tar:euid=0
160a8aa2499SBrian KuyperMMS Administrator:solaris:cmd:::/usr/bin/mmsinit:uid=0
161a8aa2499SBrian KuyperMMS Administrator:solaris:cmd:::/usr/bin/mmsadm:uid=0
162a8aa2499SBrian KuyperMMS Operator:solaris:cmd:::/usr/bin/mmsadm:uid=0;privs=file_dac_read
163a8aa2499SBrian KuyperMMS User:solaris:cmd:::/usr/bin/mmsmnt:uid=0;privs=file_dac_read
1647c478bd9Sstevel@tonic-gateName Service Management:suser:cmd:::/usr/bin/nischttl:euid=0
1657c478bd9Sstevel@tonic-gateName Service Management:suser:cmd:::/usr/bin/nisln:euid=0
1667c478bd9Sstevel@tonic-gateName Service Management:suser:cmd:::/usr/lib/nis/nisctl:euid=0
1677c478bd9Sstevel@tonic-gateName Service Management:suser:cmd:::/usr/lib/nis/nisping:euid=0
1687c478bd9Sstevel@tonic-gateName Service Management:suser:cmd:::/usr/lib/nis/nisshowcache:euid=0
1697c478bd9Sstevel@tonic-gateName Service Management:suser:cmd:::/usr/lib/nis/nisstat:euid=0
1707c478bd9Sstevel@tonic-gateName Service Management:suser:cmd:::/usr/sbin/nscd:euid=0
1717c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/bin/chkey:euid=0
1727c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/bin/nisaddcred:euid=0
1737c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/bin/nischgrp:euid=0
1747c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/bin/nischmod:euid=0
1757c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/bin/nischown:euid=0
1767c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/bin/nisgrpadm:euid=0
1777c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/bin/nismkdir:euid=0
1787c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/bin/nispasswd:euid=0
1797c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/bin/nisrm:euid=0
1807c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/bin/nisrmdir:euid=0
1817c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/bin/nistbladm:euid=0
1827c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/lib/nis/nisaddent:euid=0
1837c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/lib/nis/nisclient:uid=0
1847c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/lib/nis/nispopulate:euid=0
1857c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/lib/nis/nisserver:uid=0
1867c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/lib/nis/nissetup:euid=0
1877c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/lib/nis/nisupdkeys:euid=0
1887c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/sbin/ldapclient:uid=0
1897c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/sbin/newkey:euid=0
1907c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/sbin/nisinit:euid=0
1917c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/sbin/nislog:euid=0
1927c478bd9Sstevel@tonic-gateName Service Security:suser:cmd:::/usr/sbin/rpc.nisd:uid=0;gid=0
1937c478bd9Sstevel@tonic-gateNetwork Management:solaris:cmd:::/sbin/ifconfig:uid=0
194f4b3ec61Sdh155122Network Management:solaris:cmd:::/sbin/route:privs=sys_ip_config
1957c478bd9Sstevel@tonic-gateNetwork Management:solaris:cmd:::/sbin/routeadm:euid=0;\
196f4b3ec61Sdh155122	privs=proc_chroot,proc_owner,sys_ip_config
1970ba2cbe9Sxc151355Network Management:solaris:cmd:::/sbin/dladm:euid=dladm;egid=sys;\
198eae72b5bSSebastien Roy	privs=sys_dl_config,net_rawaccess,proc_audit
199da14cebeSEric ChengNetwork Management:solaris:cmd:::/sbin/flowadm:euid=dladm;egid=sys;\
200da14cebeSEric Cheng	privs=sys_dl_config,net_rawaccess,proc_audit
2017c478bd9Sstevel@tonic-gateNetwork Management:suser:cmd:::/usr/bin/netstat:uid=0
2027c478bd9Sstevel@tonic-gateNetwork Management:suser:cmd:::/usr/bin/rup:euid=0
2037c478bd9Sstevel@tonic-gateNetwork Management:suser:cmd:::/usr/bin/ruptime:euid=0
2047c478bd9Sstevel@tonic-gateNetwork Management:suser:cmd:::/usr/bin/setuname:euid=0
2057c478bd9Sstevel@tonic-gateNetwork Management:suser:cmd:::/usr/sbin/asppp2pppd:euid=0
2067c478bd9Sstevel@tonic-gateNetwork Management:suser:cmd:::/usr/sbin/ifconfig:uid=0
2077c478bd9Sstevel@tonic-gateNetwork Management:suser:cmd:::/usr/sbin/ipaddrsel:euid=0
2087c478bd9Sstevel@tonic-gateNetwork Management:suser:cmd:::/usr/sbin/ipqosconf:euid=0
2097c478bd9Sstevel@tonic-gateNetwork Management:suser:cmd:::/usr/sbin/rndc:privs=file_dac_read
2107c478bd9Sstevel@tonic-gateNetwork Management:suser:cmd:::/usr/sbin/route:uid=0
2117c478bd9Sstevel@tonic-gateNetwork Management:suser:cmd:::/usr/sbin/snoop:uid=0
212b127ac41SPhilip KirkNetwork Management:solaris:cmd:::/usr/sbin/snoop:privs=net_observability
2137c478bd9Sstevel@tonic-gateNetwork Management:suser:cmd:::/usr/sbin/spray:euid=0
214b127ac41SPhilip KirkNetwork Observability:solaris:cmd:::/usr/sbin/snoop:privs=net_observability
2150ba2cbe9Sxc151355Network Link Security:solaris:cmd:::/sbin/dladm:euid=dladm;egid=sys;\
216eae72b5bSSebastien Roy	privs=sys_dl_config,net_rawaccess,proc_audit
217fae0e2d7SpwernauNetwork IPsec Management:solaris:cmd:::/usr/lib/inet/certdb:euid=0;privs=none
218fae0e2d7SpwernauNetwork IPsec Management:solaris:cmd:::/usr/lib/inet/certlocal:euid=0;privs=none
219fae0e2d7SpwernauNetwork IPsec Management:solaris:cmd:::/usr/lib/inet/certrldb:euid=0;privs=none
220e3320f40SmarkfenNetwork IPsec Management:solaris:cmd:::/usr/lib/inet/in.iked:euid=0
221fae0e2d7SpwernauNetwork IPsec Management:solaris:cmd:::/usr/sbin/ikeadm:euid=0;privs=file_dac_write
222fae0e2d7SpwernauNetwork IPsec Management:solaris:cmd:::/usr/sbin/ikecert:euid=0;privs=none
223fae0e2d7SpwernauNetwork IPsec Management:solaris:cmd:::/usr/sbin/ipsecconf:euid=0;privs=sys_ip_config
224fae0e2d7SpwernauNetwork IPsec Management:solaris:cmd:::/usr/sbin/ipseckey:uid=0;privs=sys_ip_config
225e3320f40SmarkfenNetwork IPsec Management:solaris:cmd:::/usr/sbin/ipsecalgs:privs=sys_ip_config
226e3320f40SmarkfenNetwork IPsec Management:suser:cmd:::/usr/lib/inet/certdb:euid=0
227e3320f40SmarkfenNetwork IPsec Management:suser:cmd:::/usr/lib/inet/certlocal:euid=0
228e3320f40SmarkfenNetwork IPsec Management:suser:cmd:::/usr/lib/inet/certrldb:euid=0
229e3320f40SmarkfenNetwork IPsec Management:suser:cmd:::/usr/lib/inet/in.iked:euid=0
230e3320f40SmarkfenNetwork IPsec Management:suser:cmd:::/usr/sbin/ikeadm:euid=0
231e3320f40SmarkfenNetwork IPsec Management:suser:cmd:::/usr/sbin/ikecert:euid=0
232e3320f40SmarkfenNetwork IPsec Management:suser:cmd:::/usr/sbin/ipsecconf:euid=0
233e3320f40SmarkfenNetwork IPsec Management:suser:cmd:::/usr/sbin/ipseckey:uid=0
234e3320f40SmarkfenNetwork IPsec Management:suser:cmd:::/usr/sbin/ipsecalgs:euid=0
235c28749e9SkaisNetwork Security:solaris:cmd:::/usr/sbin/ksslcfg:euid=0
2367c478bd9Sstevel@tonic-gateNetwork Security:suser:cmd:::/usr/bin/ssh-keygen:uid=0;gid=sys
2377c478bd9Sstevel@tonic-gateObject Access Management:solaris:cmd:::/usr/bin/chgrp:privs=file_chown
2387c478bd9Sstevel@tonic-gateObject Access Management:solaris:cmd:::/usr/bin/chmod:privs=file_owner
2397c478bd9Sstevel@tonic-gateObject Access Management:solaris:cmd:::/usr/bin/chown:privs=file_chown
2407c478bd9Sstevel@tonic-gateObject Access Management:solaris:cmd:::/usr/bin/setfacl:privs=file_owner
2417c478bd9Sstevel@tonic-gateObject Access Management:suser:cmd:::/usr/bin/chgrp:euid=0
2427c478bd9Sstevel@tonic-gateObject Access Management:suser:cmd:::/usr/bin/chmod:euid=0
2437c478bd9Sstevel@tonic-gateObject Access Management:suser:cmd:::/usr/bin/chown:euid=0
2447c478bd9Sstevel@tonic-gateObject Access Management:suser:cmd:::/usr/bin/getfacl:euid=0
2457c478bd9Sstevel@tonic-gateObject Access Management:suser:cmd:::/usr/bin/setfacl:euid=0
24653ac4dcaSjacobsPrinter Management:suser:cmd:::/usr/lib/lp/local/lpadmin:uid=lp;gid=lp
2477c478bd9Sstevel@tonic-gatePrinter Management:suser:cmd:::/usr/sbin/lpfilter:euid=lp;uid=lp
2487c478bd9Sstevel@tonic-gatePrinter Management:suser:cmd:::/usr/sbin/lpforms:euid=lp
2497c478bd9Sstevel@tonic-gatePrinter Management:suser:cmd:::/usr/sbin/lpusers:euid=lp
250c81d47afSceasthaPrinter Management:suser:cmd:::/usr/sbin/ppdmgr:euid=0
2517c478bd9Sstevel@tonic-gateProcess Management:solaris:cmd:::/usr/bin/kill:privs=proc_owner
2527c478bd9Sstevel@tonic-gateProcess Management:solaris:cmd:::/usr/bin/nice:privs=proc_owner,proc_priocntl
2537c478bd9Sstevel@tonic-gateProcess Management:solaris:cmd:::/usr/bin/pcred:privs=proc_owner
2547c478bd9Sstevel@tonic-gateProcess Management:solaris:cmd:::/usr/bin/pfiles:privs=proc_owner
2557c478bd9Sstevel@tonic-gateProcess Management:solaris:cmd:::/usr/bin/pflags:privs=proc_owner
2567c478bd9Sstevel@tonic-gateProcess Management:solaris:cmd:::/usr/bin/ppriv:privs=proc_owner
2577c478bd9Sstevel@tonic-gateProcess Management:solaris:cmd:::/usr/bin/renice:privs=proc_owner,proc_priocntl
2587c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/crontab:euid=0
2597c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/kill:euid=0
2607c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/nice:euid=0
2617c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/pcred:euid=0
2627c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/pfiles:euid=0
2637c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/pflags:euid=0
2647c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/pldd:euid=0
2657c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/pmap:euid=0
2667c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/prun:euid=0
2677c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/ps:euid=0
2687c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/psig:euid=0
2697c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/pstack:euid=0
2707c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/pstop:euid=0
2717c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/ptime:euid=0
2727c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/ptree:euid=0
2737c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/pwait:euid=0
2747c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/pwdx:euid=0
2757c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/renice:euid=0
2767c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/bin/truss:euid=0
2777c478bd9Sstevel@tonic-gateProcess Management:suser:cmd:::/usr/sbin/fuser:euid=0
2787c478bd9Sstevel@tonic-gateProcess Management:solaris:cmd:::/usr/sbin/rcapadm:uid=0
2797c478bd9Sstevel@tonic-gateProject Management:solaris:cmd:::/usr/sbin/projadd:euid=0
2807c478bd9Sstevel@tonic-gateProject Management:solaris:cmd:::/usr/sbin/projmod:euid=0
2817c478bd9Sstevel@tonic-gateProject Management:solaris:cmd:::/usr/sbin/projdel:euid=0
2827c478bd9Sstevel@tonic-gateSoftware Installation:suser:cmd:::/usr/bin/ln:euid=0
2837c478bd9Sstevel@tonic-gateSoftware Installation:suser:cmd:::/usr/bin/pkginfo:uid=0
2847c478bd9Sstevel@tonic-gateSoftware Installation:suser:cmd:::/usr/bin/pkgmk:uid=0
2857c478bd9Sstevel@tonic-gateSoftware Installation:suser:cmd:::/usr/bin/pkgparam:uid=0
2867c478bd9Sstevel@tonic-gateSoftware Installation:suser:cmd:::/usr/bin/pkgproto:uid=0
2877c478bd9Sstevel@tonic-gateSoftware Installation:suser:cmd:::/usr/bin/pkgtrans:uid=0
2887c478bd9Sstevel@tonic-gateSoftware Installation:suser:cmd:::/usr/ccs/bin/make:euid=0
2897c478bd9Sstevel@tonic-gateSoftware Installation:suser:cmd:::/usr/sbin/install:euid=0
2907c478bd9Sstevel@tonic-gateSoftware Installation:suser:cmd:::/usr/sbin/pkgadd:uid=0;gid=bin
2917c478bd9Sstevel@tonic-gateSoftware Installation:suser:cmd:::/usr/sbin/pkgask:uid=0
2927c478bd9Sstevel@tonic-gateSoftware Installation:suser:cmd:::/usr/sbin/pkgchk:uid=0
2937c478bd9Sstevel@tonic-gateSoftware Installation:suser:cmd:::/usr/sbin/pkgrm:uid=0;gid=bin
2947c478bd9Sstevel@tonic-gateSystem Event Management:suser:cmd:::/usr/sbin/syseventadm:uid=0
2957c478bd9Sstevel@tonic-gateUser Management:suser:cmd:::/usr/sbin/grpck:euid=0
2967c478bd9Sstevel@tonic-gateUser Management:suser:cmd:::/usr/sbin/pwck:euid=0
2977c478bd9Sstevel@tonic-gateUser Management:solaris:cmd:::/usr/sbin/useradd:euid=0
2987c478bd9Sstevel@tonic-gateUser Management:solaris:cmd:::/usr/sbin/userdel:euid=0
2997c478bd9Sstevel@tonic-gateUser Management:solaris:cmd:::/usr/sbin/usermod:euid=0
3007c478bd9Sstevel@tonic-gateUser Management:solaris:cmd:::/usr/sbin/roleadd:euid=0
3017c478bd9Sstevel@tonic-gateUser Management:solaris:cmd:::/usr/sbin/roledel:euid=0
3027c478bd9Sstevel@tonic-gateUser Management:solaris:cmd:::/usr/sbin/rolemod:euid=0
3037c478bd9Sstevel@tonic-gateUser Management:solaris:cmd:::/usr/sbin/groupadd:uid=0
3047c478bd9Sstevel@tonic-gateUser Management:solaris:cmd:::/usr/sbin/groupdel:uid=0
3057c478bd9Sstevel@tonic-gateUser Management:solaris:cmd:::/usr/sbin/groupmod:uid=0
3067c478bd9Sstevel@tonic-gateUser Security:suser:cmd:::/usr/bin/passwd:uid=0
3077c478bd9Sstevel@tonic-gateUser Security:solaris:cmd:::/usr/sbin/passmgmt:uid=0
3087c478bd9Sstevel@tonic-gateUser Security:suser:cmd:::/usr/sbin/pwck:euid=0
3097c478bd9Sstevel@tonic-gateUser Security:suser:cmd:::/usr/sbin/pwconv:euid=0
3107c478bd9Sstevel@tonic-gateDAT Administration:solaris:cmd:::/usr/sbin/datadm:euid=0
311cf8f789aSeschrockZFS File System Management:solaris:cmd:::/sbin/zfs:euid=0
312cf8f789aSeschrockZFS Storage Management:solaris:cmd:::/sbin/zpool:uid=0
313a38a20b0StalleyZFS Storage Management:solaris:cmd:::/usr/lib/zfs/availdevs:uid=0
314f875b4ebSricaZone Management:solaris:cmd:::/usr/sbin/txzonemgr:uid=0
3157c478bd9Sstevel@tonic-gateZone Management:solaris:cmd:::/usr/sbin/zonecfg:uid=0
3167c478bd9Sstevel@tonic-gateZone Management:solaris:cmd:::/usr/sbin/zoneadm:uid=0
3177c478bd9Sstevel@tonic-gateZone Management:solaris:cmd:::/usr/sbin/zlogin:uid=0
318074e084fSml93401acctadm:solaris:cmd:::/usr/sbin/acctadm:euid=0;egid=0;privs=sys_acct,file_dac_write
319