Information Technology Reference
In-Depth Information
The first entry defines the
Audit Review
profile. The phrase “View the audit
trial” is a somewhat terse but accurate description. The
Attributes
field ref-
erences the
solaris.audit.read
authorization and identifies the help file
(located under
/usr/lib/help/profiles/locale/C
directory). Any privileged
operations identified by entries in the
exec_attr
file as being associated with
the
Audit Review
profile are also allowed.
The second entry defines the
Printer Management
profile. Only the help file
is identified in the
Attributes
field. However, any operations associated with
Printer Management
in the
exec_attr
field are allowed in this profile.
Table 12.3 lists the default profiles defined by the
prof_attr
file. Note that
the
Device Management
profile attributes use the phrase
solaris.device.*
,
which is a metacharacter expression implying that all
solaris.device
authorizations are included.
