getprocxsec(1M)

DESCRIPTION

The getprocxsec command displays security attributes associated with a running process. These attributes include the permitted privilege set, effective privilege set, retained privilege set, euid, and the compartment name. See privileges(5) and compartments(5).

Each process has a permitted privilege set, effective privilege set, and retained privilege set. If the compartmentalization feature is enabled, it also has a compartment. When a process is created, the child process inherits these attributes from the parent. When a process executes a binary, these attributes can be changed. See setfilexsec(1M) and getfilexsec(1M) for information on how these extended attributes can be manipulated at execution time.

For compatibility, the kernel handles processes with effective uid of zero in special ways. If the compartmentalization feature is disabled, these processes are treated as though they have all root replacement privileges. If, on the other hand, the compartmentalization feature is enabled, these processes are treated as though they have all the root replacement privileges except those configured as disallowed privileges for the compartment.

RETURN VALUE

getprocxsec returns the following values:

EXAMPLES

Example 1: Display the privilege sets and compartment of the current process:

Sample output:

Example 2: Display the privilege sets and compartment of the parent process:

Sample output:

Example 3: Display the full privilege sets and compartment of an arbitrary process:

Sample output:

SEE ALSO

getfilexsec(1M), setfilexsec(1M), compartments(5), privileges(5).