Administrative Commands for Handling Privileges
The following table lists the commands that are available to handle privileges.
Table 12-1 Commands for Handling Privilege
Purpose |
Command |
Man Page |
Examine
process privileges |
ppriv -v pid |
ppriv(1) |
Set process privileges |
ppriv -s spec |
|
List the privileges on the system |
ppriv -l |
|
List a
privilege and its description |
ppriv -lv priv |
|
Debug privilege failure |
ppriv -eD failed-operation |
|
Assign privileges to a new
local user |
useradd |
useradd(1M) |
Add privileges to an existing local user |
usermod |
usermod(1M) |
Assign privileges to a user
in a name service |
smuser |
smuser(1M) |
Assign privileges to a new local role |
roleadd |
roleadd(1M) |
Add privileges to
an existing local role |
rolemod |
rolemod(1M) |
Assign privileges to a role in a name service |
smrole |
smrole(1M) |
View
device policy |
getdevpolicy |
getdevpolicy(1M) |
Set device policy |
devfsadm |
devfsadm(1M) |
Update device policy on open devices |
update_drv -p policy driver |
update_drv(1M) |
Add device policy
to a device |
add_drv -p policy driver |
add_drv(1M) |
The Solaris Management Console GUI is the preferred tool for assigning privileges to
commands, users, and roles. For more information, see How to Assume a Role in the Solaris Management Console.