profiles

 

---

 
 
 
 User Commands                                         profiles(1)
 
 
 


NAME
      profiles - print execution profiles for a user
 


SYNOPSIS
      profiles [ -l ]  [  user  ... ]
 


DESCRIPTION
      The profiles command prints on standard output the names  of
      the  execution profiles that have been assigned to you or to
      the optionally-specified user or role name. Profiles  are  a
      bundling  mechanism  used  to  enumerate  the  commands  and
      authorizations needed to peform a specific  function.  Along
      with each listed executable are the process attributes, such
      as the effective user and group IDs, with which the  process
      runs  when  started by a privileged command interpreter. The
      profile  shells  are  pfcsh,  pfksh,  and  pfexec.  See  the
      pfexec(1) man page.
 
      Multiple profiles can be combined to construct the appropri-
      ate access control. When profiles are assigned, the authori-
      zations are added to the existing set. If the  same  command
      appears  in  multiple  profiles,  the  first  occurrence, as
      determined by the ordering of  the  profiles,  is  used  for
      process-attribute settings. For convenience, a wild card can
      be specified to match all commands.
 
      When profiles are interpreted, the profile  list  is  loaded
      from user_attr(4).  Matching entries in prof_attr(4) provide
      the   authorizations   list,   and   matching   entries   in
      exec_attr(4) provide the commands list.
 


OPTIONS
      -l    Lists the commands in each  profile  followed  by  the
            special process attributes such as user and group IDs.
 
 EXAMPLES
      Example 1: Sample output
 
      The output of the profiles command has the following form:
 
      example% profiles tester01 tester02
      tester01 : Audit Management, All Commands
      tester02 : Device Management, All Commands
      example%
 
      Example 2: Using the list option
 
      example% profiles -l tester01 tester02
      tester01 :
          Audit Management:
            /usr/sbin/audit          euid=root
            /usr/sbin/auditconfig    euid=root    egid=sys
 
 
 
 SunOS 5.8           Last change: 10 Sep 1999                    1
 
 
 
 
 
 
 User Commands                                         profiles(1)
 
 
 
          All Commands:
            *
      tester02 :
          Device Management:
            /usr/bin/allocate:       euid=root
            /usr/bin/deallocate:     euid=root
          All Commands
            *
      example%
 
 EXIT STATUS
      The following exit values are returned:
 
      0     Successful completion.
 
      1     An error occurred.
 


FILES
      /etc/security/exec_attr
 
      /etc/security/prof_attr
 
      /etc/user_attr"
 


ATTRIBUTES
      See attributes(5) for descriptions of the  following  attri-
      butes:
 
      ____________________________________________________________
     |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
     |_____________________________|_____________________________|
     | Availability                | SUNWcsu                     |
     |_____________________________|_____________________________|
 
 


SEE ALSO
      auths(1),    pfexec(1),    roles(1),    getprofattr(3SECDB),
      exec_attr(4), prof_attr(4), user_attr(4), attributes(5)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 SunOS 5.8           Last change: 10 Sep 1999                    2
 
 
 

---