Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   10987 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

cmdprivadm(1M)							cmdprivadm(1M)

NAME
       cmdprivadm  -  noninteractive  editing of a command's authorization and
       privilege information in the privrun database

SYNOPSIS

DESCRIPTION
       is a noninteractive command that allows user with  appropriate  permis‐
       sion  to	 add  or  delete a command and its privileges in the Role-Base
       Access Control (RBAC) database, See privrun(1M)	for  more  details  on
       this file.

       When  adding a line to the database, sets fields that are not specified
       a default value.	 When deleting a line,	the  lines  matching  all  the
       given  pairs  will be deleted.  That is, if all fields specified match,
       the entry will be deleted.

	      Appends a line as specified in pairs in the file.

	      Deletes a line as specified in pairs from file.

       HP recommends that only the and commands be used to edit and  view  the
       RBAC databases; do not edit the RBAC files directly.

       See rbac(5) for information on the RBAC databases.

   Options
       The following options are valid pairs for

       command		   should  include  the full path name of the command.
			   There can be one or more  arguments	following  the
			   command.

			   This	 field	may  contain  wildcards	 as defined in
			   fnmatch(3C).

       filename		   should specify the full path name of a file name.

       Specifies the operation.

       Specifies the object.

       Specifies the real user ID
			   (ruid).

       Specifies the effective user ID
			   (euid).

       Specifies the real group ID
			   (rgid).

       Specifies the effective group ID
			   (egid).

       Specifies the compartment.

       Specifies the privileges.

       Specifies the PAM service name to reauthenticate under.
			   See pam.conf(4) for a list of PAM services.

       Specifies the flags.

       Note: You must enclose values that contain the space character, or  any
       characters  that	 may  be interpreted by the shell, with single quotes.
       For example, if the has one or more arguments, enclose them with single
       quotes:

   Authorizations:
       In  order  to invoke the user must either be root, (running with effec‐
       tive UID of 0), or have the appropriate authorizations.	The  following
       is  a  list  of the required authorizations for running with particular
       options:

       Allows user to run
	      with options.

       Allows user to run
	      with options.

EXTERNAL INFLUENCES
   Environment Variables
       determines the language in which messages are displayed.

   International Code Set Support
       Single-byte character code set is supported.

RETURN VALUE
       Upon completion, returns one of the following values:

	      Success.

	      Failure.
		   An appropriate error message is printed on standard error.

EXAMPLES
       The following commands add entries into the file:

       The following commands delete entries from the file:

FILES
       Database containing valid definitions of all roles.

       Database containing definitions of all valid authorizations.

       Database specifying the roles allowed for each specified user.

       Database defining the authorizations for each specified role.

       Database containing the authorization to execute specified commands,
			   and the privileges to alter UID and GID for command
			   execution.

SEE ALSO
       authadm(1M), privrun(1M), rbacdbchk(1M), roleadm(1M), rbac(5).

								cmdprivadm(1M)

Vote for polarhome