17c478bd9Sstevel@tonic-gate# 27c478bd9Sstevel@tonic-gate# CDDL HEADER START 37c478bd9Sstevel@tonic-gate# 47c478bd9Sstevel@tonic-gate# The contents of this file are subject to the terms of the 5a532f31bSgbrunett# Common Development and Distribution License (the "License"). 6a532f31bSgbrunett# You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate# 87c478bd9Sstevel@tonic-gate# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate# or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate# See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate# and limitations under the License. 127c478bd9Sstevel@tonic-gate# 137c478bd9Sstevel@tonic-gate# When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate# file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate# If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate# fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate# information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate# 197c478bd9Sstevel@tonic-gate# CDDL HEADER END 207c478bd9Sstevel@tonic-gate# 21a532f31bSgbrunett 22a532f31bSgbrunett# 23*d71dbb73Sjbeck# Copyright 2007 Sun Microsystems, Inc. All rights reserved. 24a532f31bSgbrunett# Use is subject to license terms. 25a532f31bSgbrunett# 26a532f31bSgbrunett# ident "%Z%%M% %I% %E% SMI" 27a532f31bSgbrunett# 28a532f31bSgbrunett 29a532f31bSgbrunett# 307c478bd9Sstevel@tonic-gate# /etc/security/prof_attr 317c478bd9Sstevel@tonic-gate# 327c478bd9Sstevel@tonic-gate# profiles attributes. see prof_attr(4) 337c478bd9Sstevel@tonic-gate# 347c478bd9Sstevel@tonic-gateAll:::Execute any command as the user or role:help=RtAll.html 357c478bd9Sstevel@tonic-gateAudit Control:::Configure BSM auditing:auths=solaris.audit.config,solaris.jobs.admin;help=RtAuditCtrl.html 367c478bd9Sstevel@tonic-gateAudit Review:::Review BSM auditing logs:auths=solaris.audit.read;help=RtAuditReview.html 377c478bd9Sstevel@tonic-gateContract Observer:::Reliably observe any/all contract events:help=RtContractObserver.html 387c478bd9Sstevel@tonic-gateDevice Management:::Control Access to Removable Media:auths=solaris.device.*;help=RtDeviceMngmnt.html 397c478bd9Sstevel@tonic-gatePrinter Management:::Manage printers, daemons, spooling:help=RtPrntAdmin.html 407c478bd9Sstevel@tonic-gateCron Management:::Manage at and cron jobs:auths=solaris.jobs.*,solaris.smf.manage.cron;help=RtCronMngmnt.html 417c478bd9Sstevel@tonic-gateLog Management:::Manage log files:help=RtLogMngmnt.html 4218c2aff7SartemBasic Solaris User:::Automatically assigned rights:auths=solaris.profmgr.read,solaris.jobs.user,solaris.mail.mailq,solaris.device.mount.removable;profiles=All;help=RtDefault.html 437c478bd9Sstevel@tonic-gateDevice Security:::Manage devices and Volume Manager:auths=solaris.device.*;help=RtDeviceSecurity.html 447c478bd9Sstevel@tonic-gateDHCP Management:::Manage the DHCP service:auths=solaris.dhcpmgr.*;help=RtDHCPMngmnt.html 456185db85SdougmFile System Management:::Manage, mount, share file systems:auths=solaris.smf.manage.autofs,solaris.smf.manage.shares.*,solaris.smf.value.shares.*;help=RtFileSysMngmnt.html 467c478bd9Sstevel@tonic-gateFile System Security:::Manage file system security attributes:help=RtFileSysSecurity.html 4718c2aff7SartemHAL Management:::Manage HAL SMF service:auths=solaris.smf.manage.hal;help=RtHALMngmnt.html 487c478bd9Sstevel@tonic-gateMail Management:::Manage sendmail & queues:auths=solaris.smf.manage.sendmail;help=RtMailMngmnt.html 497c478bd9Sstevel@tonic-gateMaintenance and Repair:::Maintain and repair a system:auths=solaris.smf.manage.system-log;help=RtMaintAndRepair.html 507c478bd9Sstevel@tonic-gateMedia Backup:::Backup files and file systems:help=RtMediaBkup.html 517c478bd9Sstevel@tonic-gateMedia Restore:::Restore files and file systems from backups:help=RtMediaRestore.html 52*d71dbb73SjbeckNetwork Management:::Manage the host and network configuration:auths=solaris.smf.manage.name-service-cache,solaris.smf.manage.bind,solaris.smf.value.routing,solaris.smf.manage.routing,solaris.smf.value.nwam,solaris.smf.manage.nwam;profiles=Network Wifi Management;help=RtNetMngmnt.html 530ba2cbe9Sxc151355Network Security:::Manage network and host security:auths=solaris.smf.manage.ssh;profiles=Network Wifi Security,Network Link Security;help=RtNetSecure.html 54516fc7f3Shx147065Network Wifi Management:::Manage wifi network configuration:auths=solaris.network.wifi.config;help=RtNetWifiMngmnt.html 55516fc7f3Shx147065Network Wifi Security:::Manage wifi network security:auths=solaris.network.wifi.wep;help=RtNetWifiSecure.html 560ba2cbe9Sxc151355Network Link Security:::Manage network link security:auths=solaris.network.link.security;help=RtNetLinkSecure.html 577c478bd9Sstevel@tonic-gateName Service Management:::Non-security name service scripts/commands:help=RtNameServiceAdmin.html 587c478bd9Sstevel@tonic-gateName Service Security:::Security related name service scripts/commands:help=RtNameServiceSecure.html 597c478bd9Sstevel@tonic-gateObject Access Management:::Change ownership and permission on files:help=RtObAccessMngmnt.html 607c478bd9Sstevel@tonic-gateProcess Management:::Manage current processes and processors:auths=solaris.smf.manage.cron,solaris.smf.manage.power;help=RtProcManagement.html 617c478bd9Sstevel@tonic-gateRights Delegation:::Delegate ability to assign rights to users and roles:auths=solaris.role.delegate,solaris.profmgr.delegate,solaris.grant;help=RtRightsDelegate.html 6218c2aff7SartemRmvolmgr Management:::Manage Removable Volume Manager SMF service:auths=solaris.smf.manage.rmvolmgr;help=RtRmvolmgrMngmnt.html 637c478bd9Sstevel@tonic-gateService Management:::Manage services:auths=solaris.smf.manage,solaris.smf.modify 647c478bd9Sstevel@tonic-gateService Operator:::Administer services:auths=solaris.smf.manage,solaris.smf.modify.framework 657c478bd9Sstevel@tonic-gateSoftware Installation:::Add application software to the system:help=RtSoftwareInstall.html 667c478bd9Sstevel@tonic-gateSystem Event Management:::Manage system events and system event channels:help=RtSysEvMngmnt.html 677c478bd9Sstevel@tonic-gateUser Management:::Manage users, groups, home directory:auths=solaris.profmgr.read;help=RtUserMngmnt.html 687c478bd9Sstevel@tonic-gateUser Security:::Manage passwords, clearances:auths=solaris.role.*,solaris.profmgr.*;help=RtUserSecurity.html 697c478bd9Sstevel@tonic-gateFTP Management:::Manage the FTP server:help=RtFTPMngmnt.html 707c478bd9Sstevel@tonic-gateCrypto Management:::Cryptographic Framework Administration:help=RtCryptoMngmnt.html 717c478bd9Sstevel@tonic-gateKerberos Client Management:::Maintain and Administer Kerberos excluding the servers:help=RtKerberosClntMngmnt.html 727c478bd9Sstevel@tonic-gateKerberos Server Management:::Maintain and Administer Kerberos Servers:profiles=Kerberos Client Management;help=RtKerberosSrvrMngmnt.html 737c478bd9Sstevel@tonic-gateDAT Administration:::Manage the DAT configuration:help=RtDatAdmin.html 74fa9e4066SahrensZFS File System Management:::Create and Manage ZFS File Systems:help=RtZFSFileSysMngmnt.html 75fa9e4066SahrensZFS Storage Management:::Create and Manage ZFS Storage Pools:help=RtZFSStorageMngmnt.html 767c478bd9Sstevel@tonic-gateZone Management:::Zones Virtual Application Environment Administration:help=RtZoneMngmnt.html 777c478bd9Sstevel@tonic-gateIP Filter Management:::IP Filter Administration:help=RtIPFilterMngmnt.html 787c478bd9Sstevel@tonic-gateProject Management:::Add/Modify/Remove projects:help=RtProjManagement.html 79