usr/src/lib/libsecdb/help/profiles/RtAll.html

   1 <HTML>
   2 <!--
   3     CDDL HEADER START
   4
   5     The contents of this file are subject to the terms of the
   6     Common Development and Distribution License, Version 1.0 only
   7     (the "License").  You may not use this file except in compliance
   8     with the License.
   9
  10     You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
  11     or http://www.opensolaris.org/os/licensing.
  12     See the License for the specific language governing permissions
  13     and limitations under the License.
  14
  15     When distributing Covered Code, include this CDDL HEADER in each
  16     file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  17     If applicable, add the following below this CDDL HEADER, with the
  18     fields enclosed by brackets "[]" replaced with your own identifying
  19     information: Portions Copyright [yyyy] [name of copyright owner]
  20
  21     CDDL HEADER END
  22
  23 -- Copyright 2000 Sun Microsystems, Inc.  All rights reserved.
  24 -- Use is subject to license terms.
  25 -->
  26 <HEAD>
  27         <TITLE> </TITLE>
  28
  29
  30 </HEAD>
  31 <BODY>
  32 <!-- ident      "%Z%%M% %I%     %E% SMI" -->
  33
  34
  35 When All is in the Rights Included column, it grants the right for a user or role to use any command when working in an administrator's shell, such as the Administrator's Korn or Administrator's C shells.
  36 <p>
  37 The normal policy for these shells is that they can only execute commands that have been explicitly assigned to a user (or role) through granted rights. Because using only the granted rights can be very limiting, it is common to give users the All right, which has a wild card entry matching every command.
  38 <p>
  39 However, no special process attributes are associated with the wild card, so the effect is that all commands matching the wild card run with the uid and gid of the current user (or role).
  40 <p>
  41 If you assign this right, it should always be last in the list of rights. If it is first, no other rights are consulted when looking up command attributes.
  42 <p>
  43 If All is grayed, then you are not entitled to Add or Remove this right.
  44 </BODY>
  45 </HTML>