Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   10987 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

getfilexsec(1M)						       getfilexsec(1M)

NAME
       getfilexsec - display security attributes of binary executable(s)

SYNOPSIS
       filename...

DESCRIPTION
       The  command  displays  various extended security attributes associated
       with binary executable files.  These attributes include retained privi‐
       leges,  permitted  privileges,  and  compartment and security attribute
       flags.  See privileges(5) and exec(2)

   Options
       The command supports the following options:

	      Displays the compartment name of the file(s).

	      Displays security attribute flags.
			The only currently defined flag is the privilege start
			flag.

	      Displays the minimum permitted privileges.

	      Displays the maximum permitted privileges.

	      Displays the minimum retained privileges.

	      Displays the maximum retained privileges.

       If  no  options	are specified, all extended security attributes of the
       binary file(s) are displayed.

   Operands
       supports the following operand:

	      filename	Binary executable file.	 All file names given as argu‐
			ments  must  be	 binary	 executables.	Files of other
			types (for example, script  executables,  text	files,
			and so on) are not permitted.

   Security Restrictions
       The  user  invoking  this command must be able to open the directory in
       which the binary executable files are present.

RETURN VALUE
       returns the following values:

	      Successful completion.
		     The attributes are displayed.

	      An error occurs.
		     An error can be caused by an invalid option or inadequate
		     permissions to perform the operation.

EXAMPLES
       Example 1: Display the maximum permitted privileges and privilege-aware
       flag of binary executable file

       Sample output:

	      /web/java:
	      Flag: start_nil
	      PermittedMaxPrivileges: CMPTREAD, CMPTWRITE

SEE ALSO
       setfilexsec(1M), exec(2), compartments(5), privileges(5).

							       getfilexsec(1M)

Vote for polarhome