Are you able to specify a the profile you want to use in pfexec?

Posted by jigjig on Server Fault See other posts from Server Fault or by jigjig
Published on 2010-06-09T22:55:26Z Indexed on 2010/06/09 23:02 UTC
Read the original article Hit count: 205

Filed under:

opensolaris

|

rbac

Are you able to specify which profile you want to use for a given user when using pfexec who has been assigned multiple profiles?

One example for this use is so that we can execute a command as a different user within the same process. In exec_attr, you are able to specify the uid/gid that will be used to execute a particular command as in the following example entry:

Name Service Security:suser:cmd:::/usr/sbin/rpc.nsid:uid=0;gid=0

The above profile will use the super user (uid=0) to execute the rpc.nsid command.

In user_attr, you can specify multiple profiles as below: testuser::::type=normal;profiles=Name Service Security,Object Access Management

Can you then specify directly to use the Object Access Management profile to pfexec?

© Server Fault or respective owner

Related posts about opensolaris

Disable STP in Opensolaris bridge

as seen on Server Fault - Search for 'Server Fault'
Hello, how can i completely disable STP in a Opensolaris bridge. This bridge is connected to a Cisco Access Port and will disable the uplink port when the first BPDU arrives. bridged[3651]: [ID 581644 daemon.warning] unexpected BPDU on rge1 from 0:xx:xx:xx:xx:b; forwarding disabled I already… >>> More
OS choice between: Debian, gNewSense, and OpenSolaris

as seen on Super User - Search for 'Super User'
I am planning to migrate from Mac OS X and Windows to either a Unix or Linux distribution, i.e. I am a Linux/Unix beginner. Right now the following caught my interest: Debian: Well established with huge repository of 20000+ apps. gNewSence: "Totally free" version of Ubuntu, so it should be more… >>> More
How to list my harddrives in OpenSolaris?

as seen on Super User - Search for 'Super User'
I have a machine with two harddrives. I have installed OpenSolaris on one of them and now I want to add the other one as a mirror-drive in my zpool. But to do that I have to know the name of my drive, something like c7d0s0. Using the command zpool status can I see the harddrives already in use in… >>> More
How to navigate in OpenSolaris without a mouse?

as seen on Super User - Search for 'Super User'
I have a machine with OpenSolaris. When I log in it seams like I have to use a mouse to start an xterm console. Is there any keyboard-shortcuts that I can use instead of using the mouse? I.e. I can't even access the menu without using my mouse. >>> More
OpenSolaris: unable to contact repository, connected to internet via proxy

as seen on Server Fault - Search for 'Server Fault'
Opensolaris b134: unable to set packages catalog this system is connected to internet via proxy, while this works on browser, how to make console/terminal aware? user1@opensolaris134:~# pkg set-authority -O http://pkg.opensolaris.org/dev opensolaris.org pkg set-publisher: Could not refresh the catalog… >>> More

Related posts about rbac

Non RBAC User Roles and Permissions System: checking the user's City

as seen on Stack Overflow - Search for 'Stack Overflow'
We are currently designing a User Roles and Permissions System in our web application (ASP.NET), and it seems that we have several cases that do no fit within the classical Role-Based Access Control (RBAC). I will post several questions, each devoted to a particular case, this being the first post… >>> More
Non RBAC User Roles and Permissions System: a role with properties

as seen on Stack Overflow - Search for 'Stack Overflow'
We are currently designing a User Roles and Permissions System in our web application (ASP.NET), and it seems that we have several cases that do no fit within the classical Role-Based Access Control (RBAC). I will post several questions, each devoted to a particular case. This is my second question… >>> More
Modeling RBAC actors using LDAP (Core X.5xx)

as seen on Server Fault - Search for 'Server Fault'
Mirrored from stackoverflow... When implementing an RBAC model using an LDAP store (I'm using Apache Directory 1.0.2 as a testbed), some of the actors are obviously mappable to specific objectClasses: Resources - I don't see a clear mapping for this one. applictionEntity seems only tangentially… >>> More
OpenLDAP and user role based accedss controll (RBAC)

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello, my company uses an openldap server which stores corporate user information ((username,passwd and some other information like email are stored in ldap).. Till now they only use it for authentication but now we'd like to use for authentication also, this means that we'll create roles (as ldap… >>> More
Best Role-Based Access Control (RBAC) database model

as seen on Stack Overflow - Search for 'Stack Overflow'
What is the best database schema to track role-based access controls for a web application? I am using Rails, but the RBAC plugin linked by Google looks unmaintained (only 300 commits to SVN; latest was almost a year ago). The concept is simple enough to implement from scratch, yet complex and important… >>> More