Application Server Management:
/usr/appserver/bin/asadmin
Basic Solaris User:
/usr/bin/cdda2wav.bin
privs=file_dac_read,sys_devices,proc_priocntl,net_privaddr
/usr/bin/cdrecord.bin
privs=file_dac_read,sys_devices,proc_lock_memory,proc_priocntl,net_privaddr
/usr/bin/readcd.bin privs=file_dac_read,sys_devices,net_privaddr
All:
*
Desktop Configuration:
/usr/X11/bin/scanpci euid=0, privs=sys_config
/usr/X11/bin/xorgcfg euid=0
/usr/X11/bin/xorgconfig euid=0
File System Management:
/sbin/mount privs=sys_mount
/sbin/umount privs=sys_mount
/usr/sbin/mpathadm privs=sys_devices
/usr/sbin/quotacheck uid=0, gid=sys
/usr/sbin/quotaoff uid=0, gid=sys
/usr/sbin/quotaon uid=0, gid=sys
/usr/sbin/raidctl privs=sys_config,sys_devices, euid=0
FTP Management:
/usr/sbin/ftpaddhost uid=0
/usr/sbin/ftpconfig uid=0
/usr/sbin/ftprestart euid=0
/usr/sbin/ftpshut euid=0, egid=sys
/usr/sbin/privatepw uid=0, egid=sys
IP Filter Management:
/usr/sbin/ipf privs=sys_ip_config
/usr/sbin/ipfs privs=sys_ip_config
/usr/sbin/ipfstat privs=sys_ip_config, gid=sys
/usr/sbin/ipmon privs=sys_ip_config
/usr/sbin/ipnat privs=sys_ip_config, gid=sys
/usr/sbin/ippool privs=sys_ip_config, gid=sys
Mail Management:
/usr/lib/sendmail uid=0
/usr/sbin/editmap euid=0
/usr/sbin/makemap euid=0
/usr/sbin/newaliases euid=0
Maintenance and Repair:
/usr/bin/coreadm euid=0, privs=sys_config,proc_owner
/usr/bin/mdb privs=all
/usr/sbin/ucodeadm privs=all
Media Backup:
/usr/bin/mt euid=0
/usr/lib/fs/ufs/ufsdump euid=0, gid=sys
/usr/sbin/tar euid=0
Media Restore:
/usr/bin/cpio euid=0
/usr/bin/mt euid=0
/usr/lib/fs/ufs/ufsrestore euid=0
/usr/sbin/tar euid=0
Printer Management:
/usr/lib/lp/local/lpadmin uid=lp, gid=lp
/usr/sbin/lpfilter euid=lp, uid=lp
/usr/sbin/lpforms euid=lp
/usr/sbin/lpusers euid=lp
/usr/sbin/ppdmgr euid=0
Postgres Administration:
/usr/postgres/8.2/bin/initdb uid=postgres
/usr/postgres/8.2/bin/ipcclean uid=postgres
/usr/postgres/8.2/bin/pg_controldata uid=postgres
/usr/postgres/8.2/bin/pg_ctl uid=postgres
/usr/postgres/8.2/bin/pg_resetxlog uid=postgres
/usr/postgres/8.2/bin/postgres uid=postgres
/usr/postgres/8.2/bin/postmaster uid=postgres
Primary Administrator:
* uid=0, gid=0
Software Installation:
/usr/bin/ln euid=0
/usr/bin/pkginfo uid=0
/usr/bin/pkgmk uid=0
/usr/bin/pkgparam uid=0
/usr/bin/pkgproto uid=0
/usr/bin/pkgtrans uid=0
/usr/bin/prodreg uid=0
/usr/ccs/bin/make euid=0
/usr/sbin/install euid=0
/usr/sbin/patchadd uid=0
/usr/sbin/patchrm uid=0
/usr/sbin/pkgadd uid=0, gid=bin
/usr/sbin/pkgask uid=0
/usr/sbin/pkgchk uid=0
/usr/sbin/pkgrm uid=0, gid=bin
Audit Review:
/usr/sbin/auditreduce euid=0
/usr/sbin/auditstat euid=0
/usr/sbin/praudit euid=0
Cron Management:
/usr/bin/crontab euid=0
Device Management:
/usr/sbin/add_drv uid=0
/usr/sbin/allocate uid=0
/usr/sbin/deallocate uid=0
/usr/sbin/rem_drv uid=0
/usr/sbin/update_drv uid=0
Name Service Management:
/usr/bin/nischttl euid=0
/usr/bin/nisln euid=0
/usr/lib/nis/nisctl euid=0
/usr/lib/nis/nisping euid=0
/usr/lib/nis/nisshowcache euid=0
/usr/lib/nis/nisstat euid=0
/usr/sbin/nscd euid=0
Network Management:
/sbin/dladm euid=dladm, egid=sys,
privs=sys_net_config,net_rawaccess,proc_audit
/sbin/ifconfig uid=0
/sbin/route privs=sys_ip_config
/sbin/routeadm euid=0, privs=proc_chroot,proc_owner,sys_ip_config
/usr/sbin/quaggaadm privs=basic
/usr/sbin/zebraadm privs=basic
Object Access Management:
/usr/bin/chgrp privs=file_chown
/usr/bin/chmod privs=file_owner
/usr/bin/chown privs=file_chown
/usr/bin/setfacl privs=file_owner
Process Management:
/usr/bin/kill privs=proc_owner
/usr/bin/nice privs=proc_owner,proc_priocntl
/usr/bin/pcred privs=proc_owner
/usr/bin/pfiles privs=proc_owner
/usr/bin/pflags privs=proc_owner
/usr/bin/ppriv privs=proc_owner
/usr/bin/renice privs=proc_owner,proc_priocntl
/usr/sbin/rcapadm uid=0
User Management:
/usr/sbin/groupadd uid=0
/usr/sbin/groupdel uid=0
/usr/sbin/groupmod uid=0
/usr/sbin/roleadd euid=0
/usr/sbin/roledel euid=0
/usr/sbin/rolemod euid=0
/usr/sbin/useradd euid=0
/usr/sbin/userdel euid=0
/usr/sbin/usermod euid=0
Project Management:
/usr/sbin/projadd euid=0
/usr/sbin/projdel euid=0
/usr/sbin/projmod euid=0
# CDDL HEADER START
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# See the License for the specific language governing permissions
# and limitations under the License.
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# CDDL HEADER END
#
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
#
# CDDL HEADER END
#
# Copyright 2007 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
#
# /etc/user_attr
#
# execution attributes for profiles. see user_attr(4)
#
#ident "@(#)user_attr 1.2 07/11/14 SMI"
#
#
adm::::profiles=Log Management
dladm::::auths=solaris.smf.manage.wpa,solaris.smf.modify
lp::::profiles=Printer Management
postgres::::type=role;profiles=Postgres Administration,All
root::::auths=solaris.*,solaris.grant;profiles=Web Console Management,All;lock_after_retries=no;min_label=admin_low;clearance=admin_high
sponix::::type=normal;profiles=Apache 22 Administration,Application Server Management,Basic Solaris User,Desktop Configuration,File System Management,File System Security,FTP Management,IP Filter Management,Mail Management,Maintenance and Repair,Media Backup,Media Restore,MySql 5 Administration,Operator,Postgres Administration,Primary Administrator,Rights Delegation,SMB Management,Software Installation,System Administrator