uts: Allow for address space randomisation.
Randomise the base addresses of shared objects, non-fixed mappings, the
stack and the heap.  Introduce a service, svc:/system/process-security,
and a tool psecflags(1) to control and observe it

          --- old/usr/src/lib/libsecdb/auth_attr.txt
          +++ new/usr/src/lib/libsecdb/auth_attr.txt

   1    1  #
   2    2  # CDDL HEADER START
   3    3  #
   4    4  # The contents of this file are subject to the terms of the
   5    5  # Common Development and Distribution License (the "License").
   6    6  # You may not use this file except in compliance with the License.
   7    7  #
   8    8  # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   9    9  # or http://www.opensolaris.org/os/licensing.
  10   10  # See the License for the specific language governing permissions
  11   11  # and limitations under the License.
  12   12  #
  13   13  # When distributing Covered Code, include this CDDL HEADER in each
  14   14  # file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  15   15  # If applicable, add the following below this CDDL HEADER, with the
  16   16  # fields enclosed by brackets "[]" replaced with your own identifying
  17   17  # information: Portions Copyright [yyyy] [name of copyright owner]
  18   18  #
  19   19  # CDDL HEADER END
  20   20  #
  21   21  
  22   22  # Copyright (c) 1999, 2010, Oracle and/or its affiliates. All rights reserved.
  23   23  
  24   24  
  25   25  #
  26   26  # /etc/security/auth_attr
  27   27  #
  28   28  # authorizations. see auth_attr(4)
  29   29  #
  30   30  solaris.:::All Solaris Authorizations::help=AllSolAuthsHeader.html
  31   31  solaris.grant:::Grant All Solaris Authorizations::help=PriAdmin.html
  32   32  #
  33   33  solaris.admin.idmap.rules:::Manage Identity Mapping Rules::help=IdmapRules.html
  34   34  #
  35   35  solaris.admin.wusb.:::Administer Wireless USB::help=WUSBHeader.html
  36   36  solaris.admin.wusb.read:::Read Wireless USB Host and Device Information::help=WUSBread.html
  37   37  solaris.admin.wusb.modify:::Add or delete information of Wireless USB Device::help=WUSBmodify.html
  38   38  solaris.admin.wusb.host:::Manage Wireless USB Host::help=WUSBhost.html
  39   39  #
  40   40  solaris.audit.:::Audit System-wide Management::help=AuditHeader.html
  41   41  #
  42   42  solaris.device.:::Device Allocation::help=DevAllocHeader.html
  43   43  solaris.device.allocate:::Allocate Device::help=DevAllocate.html
  44   44  solaris.device.config:::Configure Device Attributes::help=DevConfig.html
  45   45  solaris.device.grant:::Delegate Device Administration::help=DevGrant.html
  46   46  solaris.device.revoke:::Revoke or Reclaim Device::help=DevRevoke.html
  47   47  solaris.device.cdrw:::CD-R/RW Recording Authorizations::help=DevCDRW.html
  48   48  solaris.device.mount.:::Device Mount::help=DevMount.html
  49   49  solaris.device.mount.alloptions.fixed:::Device Mount Fixed With All Options::help=DevMount.html
  50   50  solaris.device.mount.alloptions.removable:::Device Mount Removable With All Options::help=DevMount.html
  51   51  solaris.device.mount.fixed:::Device Mount Fixed::help=DevMount.html
  52   52  solaris.device.mount.removable:::Device Mount Removable::help=DevMount.html
  53   53  #
  54   54  solaris.dhcpmgr.:::DHCP Service Management::help=DhcpmgrHeader.html
  55   55  solaris.dhcpmgr.write:::Modify DHCP Service Configuration::help=DhcpmgrWrite.html
  56   56  #
  57   57  solaris.file.:::File Operations::help=FileHeader.html
  58   58  solaris.file.chown:::Change File Owner::help=FileChown.html
  59   59  solaris.file.owner:::Act as File Owner::help=FileOwner.html
  60   60  #
  61   61  solaris.hotplug.:::Hotplug::help=HotplugHeader.html
  62   62  solaris.hotplug.modify:::Modify Hotplug Connections::help=HotplugModify.html
  63   63  #
  64   64  solaris.jobs.:::Job Scheduler::help=JobHeader.html
  65   65  solaris.jobs.admin:::Manage All Jobs::help=AuthJobsAdmin.html
  66   66  solaris.jobs.grant:::Delegate Cron & At Administration::help=JobsGrant.html
  67   67  solaris.jobs.user:::Manage Owned Jobs::help=AuthJobsUser.html
  68   68  #
  69   69  solaris.label.:::Label Management::help=LabelHeader.html
  70   70  solaris.label.file.downgrade:::Downgrade File Label::help=LabelFileDowngrade.html
  71   71  solaris.label.file.upgrade:::Upgrade File Label::help=LabelFileUpgrade.html
  72   72  solaris.label.print:::View Printer Queue at All Labels::help=LabelPrint.html
  73   73  solaris.label.range:::Set Label Outside User Accred Range::help=LabelRange.html
  74   74  solaris.label.win.downgrade:::Downgrade DragNDrop or CutPaste Info::help=LabelWinDowngrade.html
  75   75  solaris.label.win.noview:::DragNDrop or CutPaste without viewing contents::help=LabelWinNoView.html
  76   76  solaris.label.win.upgrade:::Upgrade DragNDrop or CutPaste Info::help=LabelWinUpgrade.html
  77   77  #
  78   78  solaris.login.:::Login Control::help=LoginHeader.html
  79   79  solaris.login.enable:::Enable Logins::help=LoginEnable.html
  80   80  solaris.login.remote:::Remote Login::help=LoginRemote.html
  81   81  #
  82   82  solaris.mail.:::Mail::help=MailHeader.html
  83   83  solaris.mail.mailq:::Mail Queue::help=MailQueue.html
  84   84  #
  85   85  solaris.network.:::Network::help=NetworkHeader.html
  86   86  solaris.network.autoconf.read:::View Network Auto-Magic Config::help=NetworkAutoconfRead.html
  87   87  solaris.network.autoconf.select:::Enable/Disable Network Auto-Magic Config::help=NetworkAutoconfSelect.html
  88   88  solaris.network.autoconf.wlan:::Create Network Auto-Magic Config for Known WLANs::help=NetworkAutoconfWlan.html
  89   89  solaris.network.autoconf.write:::Create Network Auto-Magic Config::help=NetworkAutoconfWrite.html
  90   90  solaris.network.ilb.config:::Network ILB Configuration::help=NetworkILBconf.html
  91   91  solaris.network.ilb.enable:::Network ILB Enable Configuration::help=NetworkILBenable.html
  92   92  solaris.network.interface.config:::Network Interface Configuration::help=NetworkInterfaceConfig.html
  93   93  solaris.network.link.security:::Link Security::help=LinkSecurity.html
  94   94  solaris.network.wifi.config:::Wifi Config::help=WifiConfig.html
  95   95  solaris.network.wifi.wep:::Wifi Wep::help=WifiWep.html
  96   96  solaris.network.vrrp:::Administer VRRP::help=NetworkVRRP.html
  97   97  #
  98   98  solaris.print.:::Printer Management::help=PrintHeader.html
  99   99  solaris.print.admin:::Administer Printer::help=PrintAdmin.html
 100  100  solaris.print.cancel:::Cancel Print Job::help=PrintCancel.html
 101  101  solaris.print.list:::List Jobs in Printer Queue::help=PrintList.html
 102  102  solaris.print.nobanner:::Print without Banner::help=PrintNoBanner.html
 103  103  solaris.print.ps:::Print Postscript::help=PrintPs.html
 104  104  solaris.print.unlabeled:::Print without Label::help=PrintUnlabeled.html
 105  105  #
 106  106  solaris.profmgr.:::Rights::help=ProfmgrHeader.html
 107  107  solaris.profmgr.assign:::Assign All Rights::help=AuthProfmgrAssign.html
 108  108  solaris.profmgr.delegate:::Assign Owned Rights::help=AuthProfmgrDelegate.html
 109  109  solaris.profmgr.write:::Manage Rights::help=AuthProfmgrWrite.html
 110  110  solaris.profmgr.read:::View Rights::help=AuthProfmgrRead.html
 111  111  solaris.profmgr.execattr.write:::Manage Commands::help=AuthProfmgrExecattrWrite.html
 112  112  #
 113  113  solaris.role.:::Roles::help=RoleHeader.html
 114  114  solaris.role.assign:::Assign All Roles::help=AuthRoleAssign.html
 115  115  solaris.role.delegate:::Assign Owned Roles::help=AuthRoleDelegate.html
 116  116  solaris.role.write:::Manage Roles::help=AuthRoleWrite.html
 117  117  #
 118  118  solaris.smf.:::SMF Management::help=SmfHeader.html
 119  119  solaris.smf.modify.:::Modify All SMF Service Properties::help=SmfModifyHeader.html
 120  120  solaris.smf.modify.method:::Modify Service Methods::help=SmfModifyMethod.html
 121  121  solaris.smf.modify.dependency:::Modify Service Dependencies::help=SmfModifyDepend.html
 122  122  solaris.smf.modify.application:::Modify Application Type Properties::help=SmfModifyAppl.html
 123  123  solaris.smf.modify.framework:::Modify Framework Type Properties::help=SmfModifyFramework.html
 124  124  solaris.smf.manage.:::Manage All SMF Service States::help=SmfManageHeader.html
 125  125  solaris.smf.manage.allocate:::Manage Device Allocation Service::help=SmfAllocate.html
 126  126  solaris.smf.manage.audit:::Manage Audit Service States::help=SmfManageAudit.html
 127  127  solaris.smf.manage.autofs:::Manage Automount Service States::help=SmfAutofsStates.html
 128  128  solaris.smf.manage.bind:::Manage DNS Service States::help=BindStates.html
 129  129  solaris.smf.manage.coreadm:::Manage Coreadm Service States::help=SmfCoreadmStates.html
 130  130  solaris.smf.manage.cron:::Manage Cron Service States::help=SmfCronStates.html
 131  131  solaris.smf.manage.discovery.printers.snmp:::Manage Network Attached Device Discovery Service States::help=SmfNADDStates.html
 132  132  solaris.smf.manage.extended-accounting.flow:::Manage Flow Extended Accounting Service States::help=SmfExAcctFlowStates.html
 133  133  solaris.smf.manage.extended-accounting.process:::Manage Process Extended Accounting Service States::help=SmfExAcctProcessStates.html
 134  134  solaris.smf.manage.extended-accounting.flow:::Manage Task Extended Accounting Service States::help=SmfExAcctTaskStates.html
 135  135  solaris.smf.manage.hal:::Manage HAL Service States::help=SmfHALStates.html
 136  136  solaris.smf.manage.hotplug:::Manage Hotplug Service::help=SmfManageHotplug.html
 137  137  solaris.smf.manage.idmap:::Manage Identity Mapping Service States::help=SmfIdmapStates.html
 138  138  solaris.smf.manage.ilb:::Manage Integrated Load Balancer Service States::help=SmfILBStates.html
 139  139  solaris.smf.manage.inetd:::Manage inetd and inetd managed services States::help=SmfIntedStates.html
 140  140  solaris.smf.manage.ipsec:::Manage IPsec Service States::help=SmfIPsecStates.html
 141  141  solaris.smf.manage.labels:::Manage label server::help=LabelServer.html
 142  142  solaris.smf.manage.location:::Manage Network Location Service States::help=SmfLocationStates.html
 143  143  solaris.smf.manage.mdns:::Manage Multicast DNS Service States::help=SmfMDNSStates.html
 144  144  solaris.smf.manage.name-service-cache:::Manage Name Service Cache Daemon Service States::help=SmfNscdStates.html
 145  145  solaris.smf.manage.nwam:::Manage Network Auto-Magic Service States::help=SmfNWAMStates.html
 146  146  solaris.smf.manage.power:::Manage Power Management Service States::help=SmfPowerStates.html
 147  147  solaris.smf.manage.smb:::Manage SMB Service States::help=SmfSMBStates.html
 148  148  solaris.smf.manage.smbfs:::Manage SMB Client States::help=SmfSMBFSStates.html
 149  149  solaris.smf.manage.reparse:::Manage Reparse Service States::help=SmfReparseStates.html
 150  150  solaris.smf.manage.rmvolmgr:::Manage Rmvolmgr Service States::help=SmfRmvolmgrStates.html
 151  151  solaris.smf.manage.routing:::Manage Routing Service States::help=SmfRoutingStates.html
 152  152  solaris.smf.manage.rpc.bind:::Manage RPC Program number mapper::help=SmfRPCBind.html
 153  153  solaris.smf.manage.sendmail:::Manage Sendmail Service States::help=SmfSendmailStates.html
 154  154  solaris.smf.manage.smtp-notify:::Manage Email Event Notification Agent::
 155  155  solaris.smf.manage.snmp-notify:::Manage SNMP Event Notification Agent::
 156  156  solaris.smf.manage.ssh:::Manage Secure Shell Service States::help=SmfSshStates.html
 157  157  solaris.smf.manage.stmf:::Manage STMF Service States::help=SmfSTMFStates.html
 158  158  solaris.smf.manage.system-log:::Manage Syslog Service States::help=SmfSyslogStates.html
 159  159  solaris.smf.manage.tnctl:::Manage Refresh of Trusted Network Parameters::help=TNctl.html
 160  160  solaris.smf.manage.tnd:::Manage Trusted Network Daemon::help=TNDaemon.html
 161  161  solaris.smf.manage.vrrp:::Manage VRRP Service States::help=SmfVRRPStates.html
 162  162  solaris.smf.manage.vscan:::Manage VSCAN Service States::help=SmfVscanStates.html
 163  163  solaris.smf.manage.vt:::Manage Virtual Console Service States::help=SmfVtStates.html
 164  164  solaris.smf.manage.wpa:::Manage WPA Service States::help=SmfWpaStates.html
 165  165  solaris.smf.manage.ndmp:::Manage NDMP Service States::help=SmfNDMPStates.html
 166  166  solaris.smf.value.:::Change Values of SMF Service Properties::help=SmfValueHeader.html
 167  167  solaris.smf.value.audit:::Configure the Audit Service::help=SmfValueAudit.html
 168  168  solaris.smf.value.coreadm:::Change Values of SMF Coreadm Properties::help=SmfValueCoreadm.html

 169  169  solaris.smf.value.discovery.printers.snmp:::Manage Network Attached Device Discovery Service Properties::help=SmfValueNADD.html
 170  170  solaris.smf.value.extended-accounting.flow:::Change Values of Flow Extended Accounting Service Properties::help=SmfValueExAcctFlow.html
 171  171  solaris.smf.value.extended-accounting.process:::Change Values of Process Extended Accounting Service Properties::help=SmfValueExAcctProcess.html
 172  172  solaris.smf.value.extended-accounting.task:::Change Values of Task Extended Accounting Service Properties::help=SmfValueExAcctTask.html
 173  173  solaris.smf.value.firewall.config:::Change Service Firewall Config::help=SmfValueFirewall.html
 174  174  solaris.smf.value.idmap:::Change Values of SMF Identity Mapping Service Properties::help=SmfValueIdmap.html
 175  175  solaris.smf.value.inetd:::Change values of SMF Inetd configuration paramaters::help=SmfValueInted.html
 176  176  solaris.smf.value.ipsec:::Change Values of SMF IPsec Properties::help=SmfValueIPsec.html
 177  177  solaris.smf.value.mdns:::Change Values of MDNS Service Properties::help=SmfValueMDNS.html
 178  178  solaris.smf.value.nwam:::Change Values of SMF Network Auto-Magic Properties::help=SmfValueNWAM.html
      179 +solaris.smf.value.process-security:::Change Values of Process Security properties::help=SmfValueProcSec.html
 179  180  solaris.smf.value.smb:::Change Values of SMB Service Properties::help=SmfValueSMB.html
 180  181  solaris.smf.read.smb:::Read permission for protected SMF SMB Service Properties::help=AuthReadSMB.html
 181  182  solaris.smf.value.smtp-notify:::Change values of Email Event Notification Agent properties::
 182  183  solaris.smf.value.snmp-notify:::Change values of SNMP Event Notification Agent properties::
 183  184  solaris.smf.read.stmf:::Read STMF Provider Private Data::help=SmfSTMFRead.html
 184  185  solaris.smf.value.routing:::Change Values of SMF Routing Properties::help=SmfValueRouting.html
 185  186  solaris.smf.value.tnd:::Change Trusted Network Daemon Service Property Values::help=ValueTND.html
 186  187  solaris.smf.value.vscan:::Change Values of VSCAN Properties::help=SmfValueVscan.html
 187  188  solaris.smf.value.vt:::Change Values of Virtual Console Service Properties::help=SmfValueVt.html
 188  189  solaris.smf.value.ndmp:::Change Values of SMF NDMP Service Properties::help=SmfValueNDMP.html

 189  190  solaris.smf.read.ndmp:::Read permission for protected SMF NDMP Service Properties::help=AuthReadNDMP.html
 190  191  #
 191  192  solaris.system.:::Machine Administration::help=SysHeader.html
 192  193  solaris.system.date:::Set Date & Time::help=SysDate.html
 193  194  solaris.system.maintenance:::Enter Maintenance (single-user) Mode::help=SysMaintenance.html
 194  195  solaris.system.shutdown:::Shutdown the System::help=SysShutdown.html
 195  196  solaris.system.power.:::System Power Management::help=SysPowerMgmtHeader.html
 196  197  solaris.system.power.suspend.:::Suspend the System::help=SysPowerMgmtSuspend.html
 197  198  solaris.system.power.suspend.disk:::Suspend to Disk::help=SysPowerMgmtSuspendtoDisk.html 
 198  199  solaris.system.power.suspend.ram:::Suspend to RAM::help=SysPowerMgmtSuspendToRAM.html
 199  200  solaris.system.power.brightness:::Control LCD Brightness::help=SysPowerMgmtBrightness.html
 200  201  solaris.system.power.cpu:::Manage CPU related power::help=SysCpuPowerMgmt.html
 201  202  solaris.system.sysevent.read:::Retrieve Sysevents::help=SysSyseventRead.html
 202  203  solaris.system.sysevent.write:::Publish Sysevents::help=SysSyseventWrite.html
 203  204  #
 204  205  solaris.smf.modify.stmf:::Modify STMF Properties::help=SmfSTMFValue.html
 205  206  #
 206  207  solaris.smf.manage.isns:::Manage iSNS Service States::help=isnsStates.html
 207  208  solaris.smf.value.isns:::Modify iSNS Service Property Values::help=isnsValue.html
 208  209  solaris.isnsmgr.write:::Modify iSNS configuration::help=AuthISNSmgrWrite.html
 209  210  solaris.smf.manage.wusb:::Manage Wireless USB Service::help=SmfWusbStates.html
 210  211  solaris.zone.:::Zone Management::help=ZoneHeader.html
 211  212  solaris.zone.clonefrom:::Clone another Zone::help=ZoneCloneFrom.html
 212  213  solaris.zone.login:::Zone Login::help=ZoneLogin.html
 213  214  solaris.zone.manage:::Zone Deployment::help=ZoneManage.html

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX