profiles man page on SmartOS

Man page or keyword search:  
man Server   16655 pages
apropos Keyword Search (all sections)
Output format
SmartOS logo
[printable version]

PROFILES(1)							   PROFILES(1)

       profiles - print execution profiles for a user

       profiles [-l] [ user ]...

       The  profiles command prints on standard output the names of the execu‐
       tion profiles that have been assigned to you or to the optionally-spec‐
       ified user or role name. Profiles are a bundling mechanism used to enu‐
       merate the commands and authorizations needed  to  perform  a  specific
       function. Along with each listed executable are the process attributes,
       such as the effective user and group IDs, with which the	 process  runs
       when  started  by  a privileged command interpreter. The profile shells
       are pfcsh, pfksh, and pfexec.  See the pfexec(1) man page. Profiles can
       contain other profiles defined in prof_attr(4).

       Multiple	 profiles  can be combined to construct the appropriate access
       control.	 When profiles are assigned, the authorizations are  added  to
       the  existing  set.   If the same command appears in multiple profiles,
       the first occurrence, as determined by the ordering of the profiles, is
       used  for  process-attribute settings. For convenience, a wild card can
       be specified to match all commands.

       When  profiles  are  interpreted,  the  profile	list  is  loaded  from
       user_attr(4).  If  any default profile is defined in /etc/security/pol‐
       icy.conf (see policy.conf(4)), the list of default profiles  are	 added
       to  the list loaded from user_attr(4). Matching entries in prof_attr(4)
       provide the authorizations list, and matching entries  in  exec_attr(4)
       provide the commands list.

       The following options are supported:

	     Lists  the	 commands  in  each  profile  followed	by the special
	     process attributes such as user and group IDs.

       Example 1 Sample Output

       The output of the profiles command has the following form:

	 example% profiles tester01 tester02tester01 : Audit Management, All Commands
	 tester02 : Device Management, All Commands

       Example 2 Using the list Option

	 example% profiles -l tester01 tester02tester01 :
	     Audit Management:
	       /usr/sbin/audit		euid=root
	       /usr/sbin/auditconfig	euid=root    egid=sys
	     All Commands:
	 tester02 :
	     Device Management:
	       /usr/bin/allocate:	euid=root
	       /usr/bin/deallocate:	euid=root
	     All Commands

       The following exit values are returned:

	     Successful completion.

	     An error occurred.





       auths(1), pfexec(1), roles(1), getprofattr(3SECDB), exec_attr(4),  pol‐
       icy.conf(4), prof_attr(4), user_attr(4), attributes(5)

				 Feb 11, 2000			   PROFILES(1)

List of man pages available for SmartOS

Copyright (c) for man pages and the logo by the respective OS vendor.

For those who want to learn more, the polarhome community provides shell access and support.

[legal] [privacy] [GNU] [policy] [cookies] [netiquette] [sponsors] [FAQ]
Polarhome, production since 1999.
Member of Polarhome portal.
Based on Fawad Halim's script.
Vote for polarhome
Free Shell Accounts :: the biggest list on the net