Information Technology Reference
In-Depth Information
Table 12.7
Default RBAC Execution Attributes
Profile Name Command
Attributes
All
*
Audit Control
/usr/sbin/audit
euid=0
Audit Control
/etc/security/bsmunconv
uid=0
Audit Control
/usr/sbin/auditd
uid=0
Audit Control
/etc/init.d/audit
euid=0;egid=3
Audit Control
/usr/sbin/auditconfig
euid=0
Audit Control
/etc/security/bsmconv
uid=0
Audit Review
/usr/sbin/praudit
euid=0
Audit Review
/usr/sbin/auditreduce
euid=0
Audit Review
/usr/sbin/auditstat
euid=0
Cron Management
/etc/init.d/cron
uid=0;gid=sys
Cron Management
/usr/bin/crontab
euid=0
Device Management
/usr/sbin/allocate
uid=0
Device Management
/usr/sbin/deallocate
uid=0
Device Security
/etc/init.d/mkdtab
uid=0;gid=sys
Device Security
/usr/sbin/eeprom
uid=0
Device Security
/etc/init.d/volmgt
uid=0;gid=sys
Device Security
/etc/init.d/keymap
uid=0;gid=sys
Device Security
/usr/sbin/list_devices
euid=0
Device Security
/etc/init.d/dtlogin
uid=0;gid=sys
Device Security
/etc/init.d/drvconfig
uid=0;gid=sys
Device Security
/etc/init.d/pcmcia
uid=0;gid=sys
Device Security
/etc/init.d/devlinks
uid=0;gid=sys
Device Security
/usr/sbin/strace
euid=0
Device Security
/etc/init.d/initpcmcia
uid=0;gid=sys
DHCP Management
/usr/lib/inet/dhcp/svcadm/dhcpconfig
uid=0
DHCP Management
/usr/lib/inet/dhcp/svcadm/pntadm
uid=0
DHCP Management
/usr/lib/inet/dhcp/svcadm/dhtadm
uid=0
File System Management
/usr/sbin/mount
uid=0
File System Management
/usr/sbin/dfshares
euid=0
File System Management
/usr/sbin/format
uid=0
File System Management
/usr/sbin/devinfo
euid=0
File System Management
/usr/sbin/mkfs
euid=0
(continued)
