Print this page
9728 3secdb man pages need some tlc
*** 1,11 ****
'\" te
.\" Copyright (c) 2005, Sun Microsystems, Inc. All Rights Reserved.
.\" The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License.
.\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing. See the License for the specific language governing permissions and limitations under the License.
.\" When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE. If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
! .TH GETEXECATTR 3SECDB "May 27, 2014"
.SH NAME
getexecattr, free_execattr, setexecattr, endexecattr, getexecuser, getexecprof,
match_execattr \- get execution profile entry
.SH SYNOPSIS
.LP
--- 1,12 ----
'\" te
+ .\" Copyright 2018 Peter Tribble
.\" Copyright (c) 2005, Sun Microsystems, Inc. All Rights Reserved.
.\" The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License.
.\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing. See the License for the specific language governing permissions and limitations under the License.
.\" When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE. If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
! .TH GETEXECATTR 3SECDB "Aug 13, 2018"
.SH NAME
getexecattr, free_execattr, setexecattr, endexecattr, getexecuser, getexecprof,
match_execattr \- get execution profile entry
.SH SYNOPSIS
.LP
*** 49,59 ****
\fBexecattr_t *\fR\fBmatch_execattr\fR(\fBexecattr_t *\fR\fIep\fR, \fBchar *\fR\fIprofname\fR,
\fBchar *\fR\fItype\fR, \fBchar *\fR\fIid\fR);
.fi
.SH DESCRIPTION
- .sp
.LP
The \fBgetexecattr()\fR function returns a single \fBexec_attr\fR(4) entry.
Entries can come from any of the sources specified in the
\fBnsswitch.conf\fR(4) file.
.sp
--- 50,59 ----
*** 68,80 ****
structure defined in <\fBexec_attr.h\fR> with the following members:
.sp
.in +2
.nf
char *name; /* name of the profile */
- char *type; /* type of profile */
char *policy; /* policy under which the attributes are */
/* relevant*/
char *res1; /* reserved for future use */
char *res2; /* reserved for future use */
char *id; /* unique identifier */
kva_t *attr; /* attributes */
struct execattr_s *next; /* optional pointer to next profile */
--- 68,80 ----
structure defined in <\fBexec_attr.h\fR> with the following members:
.sp
.in +2
.nf
char *name; /* name of the profile */
char *policy; /* policy under which the attributes are */
/* relevant*/
+ char *type; /* type of profile */
char *res1; /* reserved for future use */
char *res2; /* reserved for future use */
char *id; /* unique identifier */
kva_t *attr; /* attributes */
struct execattr_s *next; /* optional pointer to next profile */
*** 136,153 ****
matching criteria. In the event that multiple entries meet the matching
criteria, only a pointer to the first entry is returned. The
\fBkva_match\fR(3SECDB) function can be used to look up a key in a key-value
array.
.SH RETURN VALUES
- .sp
.LP
Those functions returning data only return data related to the active policy.
The \fBgetexecattr()\fR function returns a pointer to a \fBexecattr_t\fR if it
successfully enumerates an entry; otherwise it returns \fINULL\fR, indicating
the end of the enumeration.
.SH USAGE
- .sp
.LP
The \fBgetexecattr()\fR, \fBgetexecuser()\fR, and \fBgetexecprof()\fR functions
all allocate memory for the pointers they return. This memory should be
deallocated with the \fBfree_execattr()\fR call. The \fBmatch_execattr()\fR
function does not allocate any memory. Therefore, pointers returned by this
--- 136,151 ----
*** 186,196 ****
\fBExample 3 \fRTell everything that can be done in the Filesystem Security
profile.
.sp
.in +2
.nf
! if ((execprof=getexecprof("Filesystem Security", KV_NULL, NULL,
GET_ALL))==NULL)) {
/* do error */
}
.fi
.in -2
--- 184,194 ----
\fBExample 3 \fRTell everything that can be done in the Filesystem Security
profile.
.sp
.in +2
.nf
! if ((execprof=getexecprof("Filesystem Security", NULL, NULL,
GET_ALL))==NULL)) {
/* do error */
}
.fi
.in -2
*** 198,213 ****
.LP
\fBExample 4 \fRTell if the \fBtar\fR utility is in a profile assigned to user
wetmore. If there is no exact profile entry, the wildcard (*), if defined, is
returned.
.sp
- .LP
- The following tells if the \fBtar\fR utility is in a profile assigned to user
- wetmore. If there is no exact profile entry, the wildcard (*), if defined, is
- returned.
-
- .sp
.in +2
.nf
if ((execprof=getexecuser("wetmore", KV_COMMAND, "/usr/bin/tar",
GET_ONE))==NULL) {
/* do error */
--- 196,205 ----
*** 214,230 ****
}
.fi
.in -2
.SH FILES
- .sp
.ne 2
.na
\fB\fB/etc/nsswitch.conf\fR\fR
.ad
.RS 29n
! configuration file lookup information for the name server switch
.RE
.sp
.ne 2
.na
--- 206,221 ----
}
.fi
.in -2
.SH FILES
.ne 2
.na
\fB\fB/etc/nsswitch.conf\fR\fR
.ad
.RS 29n
! configuration file lookup information for the name service switch
.RE
.sp
.ne 2
.na
*** 250,261 ****
.ad
.RS 29n
policy definitions
.RE
- .SH ATTRIBUTES
.sp
.LP
See \fBattributes\fR(5) for descriptions of the following attributes:
.sp
.sp
--- 241,260 ----
.ad
.RS 29n
policy definitions
.RE
.sp
+ .ne 2
+ .na
+ \fB\fB/etc/security/prof_attr\fR\fR
+ .ad
+ .RS 29n
+ profile information
+ .RE
+
+ .SH ATTRIBUTES
.LP
See \fBattributes\fR(5) for descriptions of the following attributes:
.sp
.sp
*** 267,276 ****
_
MT-Level MT-Safe
.TE
.SH SEE ALSO
- .sp
.LP
! \fBgetauthattr\fR(3SECDB), \fBgetuserattr\fR(3SECDB), \fBkva_match\fR(3SECDB),
! \fBexec_attr\fR(4), \fBpasswd\fR(4), \fBpolicy.conf\fR(4), \fBprof_attr\fR(4),
! \fBuser_attr\fR(4), \fBattributes\fR(5)
--- 266,275 ----
_
MT-Level MT-Safe
.TE
.SH SEE ALSO
.LP
! \fBgetauthattr\fR(3SECDB), \fBgetprofattr\fR(3SECDB), \fBgetuserattr\fR(3SECDB),
! \fBkva_match\fR(3SECDB), \fBexec_attr\fR(4), \fBpasswd\fR(4),
! \fBpolicy.conf\fR(4), \fBprof_attr\fR(4), \fBuser_attr\fR(4),
! \fBattributes\fR(5)