United States-English |
|
|
HP-UX Reference > Ccmdprivadm(1M)HP-UX 11i Version 3: February 2007 |
|
NAMEcmdprivadm — noninteractive editing of a command's authorization and privilege information in the privrun database SYNOPSIScmdprivadm add option=value [option=value]... cmdprivadm delete option=value [option=value]... DESCRIPTIONcmdprivadm is a noninteractive command that allows user with appropriate permission to add or delete a command and its privileges in the Role-Base Access Control (RBAC) database, /etc/rbac/cmd_priv. See privrun(1M) for more details on this file. When adding a line to the database, cmdprivadm sets fields that are not specified a default value. When deleting a line, the lines matching all the given option=value pairs will be deleted. That is, if all fields specified match, the entry will be deleted. cmdprivadm add option=value [option=value]...
cmdprivadm delete option=value [option=value]...
HP recommends that only the authadm, cmdprivadm, and roleadm commands be used to edit and view the RBAC databases; do not edit the RBAC files directly. See rbac(5) for information on the RBAC databases. OptionsThe following options are valid option=value pairs for cmdprivadm.
Note: You must enclose values that contain the space character, or any characters that may be interpreted by the shell, with single quotes. For example, if the cmd has one or more arguments, enclose them with single quotes: cmd='mount -a' Authorizations:In order to invoke cmdprivadm, the user must either be root, (running with effective UID of 0), or have the appropriate authorizations. The following is a list of the required authorizations for running cmdprivadm with particular options:
RETURN VALUEUpon completion, cmdprivadm returns one of the following values:
EXAMPLESThe following commands add entries into the /etc/rbac/cmd_priv file: # cmdprivadm add cmd='/sbin/mount -a' op=hpux.adm.mount \ > object='*' ruid=0 euid=0 rgid=0 egid=0 compartment=testcomp \ > privs=BASICROOT,CHANGECMPT re-auth=passwd # cmdprivadm add cmd=/sbin/mount op=hpux.printer.add object='*' The following commands delete entries from the /etc/rbac/cmd_priv file: # cmdprivadm delete cmd='/sbin/mount -a' # cmdprivadm delete cmd=/sbin/mount FILES
|
Printable version | ||
|