Print this page
uts: add a concept of a 'default' set of privileges, separate from 'basic'
| Split |
Close |
| Expand all |
| Collapse all |
--- old/usr/src/uts/common/os/priv_defs
+++ new/usr/src/uts/common/os/priv_defs
1 1 /*
2 2 * CDDL HEADER START
3 3 *
4 4 * The contents of this file are subject to the terms of the
5 5 * Common Development and Distribution License (the "License").
6 6 * You may not use this file except in compliance with the License.
7 7 *
8 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 9 * or http://www.opensolaris.org/os/licensing.
10 10 * See the License for the specific language governing permissions
11 11 * and limitations under the License.
12 12 *
13 13 * When distributing Covered Code, include this CDDL HEADER in each
14 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 15 * If applicable, add the following below this CDDL HEADER, with the
16 16 * fields enclosed by brackets "[]" replaced with your own identifying
17 17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 18 *
19 19 * CDDL HEADER END
20 20 */
21 21 /*
22 22 * Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved.
23 23 * Copyright 2015, Joyent, Inc. All rights reserved.
24 24 *
25 25 INSERT COMMENT
26 26 */
27 27
28 28 #
29 29 # Privileges can be added to this file at any location, not
30 30 # necessarily at the end. For patches, it is probably best to
31 31 # add the new privilege at the end; for ordinary releases privileges
32 32 # should be ordered alphabetically.
33 33 #
34 34
35 35 privilege PRIV_CONTRACT_EVENT
36 36
37 37 Allows a process to request critical events without limitation.
38 38 Allows a process to request reliable delivery of all events on
39 39 any event queue.
40 40
41 41 privilege PRIV_CONTRACT_IDENTITY
42 42
43 43 Allows a process to set the service FMRI value of a process
44 44 contract template.
45 45
46 46 privilege PRIV_CONTRACT_OBSERVER
47 47
48 48 Allows a process to observe contract events generated by
49 49 contracts created and owned by users other than the process's
50 50 effective user ID.
51 51 Allows a process to open contract event endpoints belonging to
52 52 contracts created and owned by users other than the process's
53 53 effective user ID.
54 54
55 55 privilege PRIV_CPC_CPU
56 56
57 57 Allow a process to access per-CPU hardware performance counters.
58 58
59 59 privilege PRIV_DTRACE_KERNEL
60 60
61 61 Allows DTrace kernel-level tracing.
62 62
63 63 privilege PRIV_DTRACE_PROC
64 64
65 65 Allows DTrace process-level tracing.
66 66 Allows process-level tracing probes to be placed and enabled in
67 67 processes to which the user has permissions.
68 68
69 69 privilege PRIV_DTRACE_USER
70 70
71 71 Allows DTrace user-level tracing.
72 72 Allows use of the syscall and profile DTrace providers to
73 73 examine processes to which the user has permissions.
74 74
75 75 privilege PRIV_FILE_CHOWN
76 76
77 77 Allows a process to change a file's owner user ID.
78 78 Allows a process to change a file's group ID to one other than
79 79 the process' effective group ID or one of the process'
80 80 supplemental group IDs.
81 81
82 82 privilege PRIV_FILE_CHOWN_SELF
83 83
84 84 Allows a process to give away its files; a process with this
85 85 privilege will run as if {_POSIX_CHOWN_RESTRICTED} is not
86 86 in effect.
87 87
88 88 privilege PRIV_FILE_DAC_EXECUTE
89 89
90 90 Allows a process to execute an executable file whose permission
91 91 bits or ACL do not allow the process execute permission.
92 92
93 93 privilege PRIV_FILE_DAC_READ
94 94
95 95 Allows a process to read a file or directory whose permission
96 96 bits or ACL do not allow the process read permission.
97 97
98 98 privilege PRIV_FILE_DAC_SEARCH
99 99
100 100 Allows a process to search a directory whose permission bits or
101 101 ACL do not allow the process search permission.
102 102
103 103 privilege PRIV_FILE_DAC_WRITE
104 104
105 105 Allows a process to write a file or directory whose permission
106 106 bits or ACL do not allow the process write permission.
107 107 In order to write files owned by uid 0 in the absence of an
108 108 effective uid of 0 ALL privileges are required.
109 109
110 110 privilege PRIV_FILE_DOWNGRADE_SL
111 111
112 112 Allows a process to set the sensitivity label of a file or
113 113 directory to a sensitivity label that does not dominate the
114 114 existing sensitivity label.
115 115 This privilege is interpreted only if the system is configured
116 116 with Trusted Extensions.
117 117
118 118 privilege PRIV_FILE_FLAG_SET
119 119
120 120 Allows a process to set immutable, nounlink or appendonly
121 121 file attributes.
122 122
123 123 basic privilege PRIV_FILE_LINK_ANY
124 124
125 125 Allows a process to create hardlinks to files owned by a uid
126 126 different from the process' effective uid.
127 127
128 128 privilege PRIV_FILE_OWNER
129 129
130 130 Allows a process which is not the owner of a file or directory
131 131 to perform the following operations that are normally permitted
132 132 only for the file owner: modify that file's access and
133 133 modification times; remove or rename a file or directory whose
134 134 parent directory has the ``save text image after execution''
135 135 (sticky) bit set; mount a ``namefs'' upon a file; modify
136 136 permission bits or ACL except for the set-uid and set-gid
137 137 bits.
138 138
139 139 basic privilege PRIV_FILE_READ
140 140
141 141 Allows a process to read objects in the filesystem.
142 142
143 143 privilege PRIV_FILE_SETID
144 144
145 145 Allows a process to change the ownership of a file or write to
146 146 a file without the set-user-ID and set-group-ID bits being
147 147 cleared.
148 148 Allows a process to set the set-group-ID bit on a file or
149 149 directory whose group is not the process' effective group or
150 150 one of the process' supplemental groups.
151 151 Allows a process to set the set-user-ID bit on a file with
152 152 different ownership in the presence of PRIV_FILE_OWNER.
153 153 Additional restrictions apply when creating or modifying a
154 154 set-uid 0 file.
155 155
156 156 privilege PRIV_FILE_UPGRADE_SL
157 157
158 158 Allows a process to set the sensitivity label of a file or
159 159 directory to a sensitivity label that dominates the existing
160 160 sensitivity label.
161 161 This privilege is interpreted only if the system is configured
162 162 with Trusted Extensions.
163 163
164 164 basic privilege PRIV_FILE_WRITE
165 165
166 166 Allows a process to modify objects in the filesystem.
167 167
168 168 privilege PRIV_GRAPHICS_ACCESS
169 169
170 170 Allows a process to make privileged ioctls to graphics devices.
171 171 Typically only xserver process needs to have this privilege.
172 172 A process with this privilege is also allowed to perform
173 173 privileged graphics device mappings.
174 174
175 175 privilege PRIV_GRAPHICS_MAP
176 176
177 177 Allows a process to perform privileged mappings through a
178 178 graphics device.
179 179
180 180 privilege PRIV_IPC_DAC_READ
181 181
182 182 Allows a process to read a System V IPC
183 183 Message Queue, Semaphore Set, or Shared Memory Segment whose
184 184 permission bits do not allow the process read permission.
185 185 Allows a process to read remote shared memory whose
186 186 permission bits do not allow the process read permission.
187 187
188 188 privilege PRIV_IPC_DAC_WRITE
189 189
190 190 Allows a process to write a System V IPC
191 191 Message Queue, Semaphore Set, or Shared Memory Segment whose
192 192 permission bits do not allow the process write permission.
193 193 Allows a process to read remote shared memory whose
194 194 permission bits do not allow the process write permission.
195 195 Additional restrictions apply if the owner of the object has uid 0
196 196 and the effective uid of the current process is not 0.
197 197
198 198 privilege PRIV_IPC_OWNER
199 199
200 200 Allows a process which is not the owner of a System
201 201 V IPC Message Queue, Semaphore Set, or Shared Memory Segment to
202 202 remove, change ownership of, or change permission bits of the
203 203 Message Queue, Semaphore Set, or Shared Memory Segment.
204 204 Additional restrictions apply if the owner of the object has uid 0
205 205 and the effective uid of the current process is not 0.
206 206
207 207 basic privilege PRIV_NET_ACCESS
208 208
209 209 Allows a process to open a TCP, UDP, SDP or SCTP network endpoint.
210 210
211 211 privilege PRIV_NET_BINDMLP
212 212
213 213 Allow a process to bind to a port that is configured as a
214 214 multi-level port(MLP) for the process's zone. This privilege
215 215 applies to both shared address and zone-specific address MLPs.
216 216 See tnzonecfg(4) from the Trusted Extensions manual pages for
217 217 information on configuring MLP ports.
218 218 This privilege is interpreted only if the system is configured
219 219 with Trusted Extensions.
220 220
221 221 privilege PRIV_NET_ICMPACCESS
222 222
223 223 Allows a process to send and receive ICMP packets.
224 224
225 225 privilege PRIV_NET_MAC_AWARE
226 226
227 227 Allows a process to set NET_MAC_AWARE process flag by using
228 228 setpflags(2). This privilege also allows a process to set
229 229 SO_MAC_EXEMPT socket option by using setsockopt(3SOCKET).
230 230 The NET_MAC_AWARE process flag and the SO_MAC_EXEMPT socket
231 231 option both allow a local process to communicate with an
232 232 unlabeled peer if the local process' label dominates the
233 233 peer's default label, or if the local process runs in the
234 234 global zone.
235 235 This privilege is interpreted only if the system is configured
236 236 with Trusted Extensions.
237 237
238 238 privilege PRIV_NET_MAC_IMPLICIT
239 239
240 240 Allows a process to set SO_MAC_IMPLICIT option by using
241 241 setsockopt(3SOCKET). This allows a privileged process to
242 242 transmit implicitly-labeled packets to a peer.
243 243 This privilege is interpreted only if the system is configured
244 244 with Trusted Extensions.
245 245
246 246 privilege PRIV_NET_OBSERVABILITY
247 247
248 248 Allows a process to access /dev/lo0 and the devices in /dev/ipnet/
249 249 while not requiring them to need PRIV_NET_RAWACCESS.
250 250
251 251 privilege PRIV_NET_PRIVADDR
252 252
253 253 Allows a process to bind to a privileged port
254 254 number. The privilege port numbers are 1-1023 (the traditional
255 255 UNIX privileged ports) as well as those ports marked as
256 256 "udp/tcp_extra_priv_ports" with the exception of the ports
257 257 reserved for use by NFS.
258 258
259 259 privilege PRIV_NET_RAWACCESS
260 260
261 261 Allows a process to have direct access to the network layer.
262 262
263 263 unsafe privilege PRIV_PROC_AUDIT
264 264
265 265 Allows a process to generate audit records.
266 266 Allows a process to get its own audit pre-selection information.
267 267
268 268 privilege PRIV_PROC_CHROOT
269 269
270 270 Allows a process to change its root directory.
271 271
272 272 privilege PRIV_PROC_CLOCK_HIGHRES
273 273
274 274 Allows a process to use high resolution timers.
275 275
276 276 basic privilege PRIV_PROC_EXEC
277 277
278 278 Allows a process to call execve().
279 279
280 280 basic privilege PRIV_PROC_FORK
281 281
282 282 Allows a process to call fork1()/forkall()/vfork()
283 283
284 284 basic privilege PRIV_PROC_INFO
285 285
286 286 Allows a process to examine the status of processes other
287 287 than those it can send signals to. Processes which cannot
288 288 be examined cannot be seen in /proc and appear not to exist.
289 289
290 290 privilege PRIV_PROC_LOCK_MEMORY
291 291
292 292 Allows a process to lock pages in physical memory.
293 293
294 294 privilege PRIV_PROC_MEMINFO
295 295
296 296 Allows a process to access physical memory information.
297 297
298 298 privilege PRIV_PROC_OWNER
299 299
300 300 Allows a process to send signals to other processes, inspect
|
↓ open down ↓ |
300 lines elided |
↑ open up ↑ |
301 301 and modify process state to other processes regardless of
302 302 ownership. When modifying another process, additional
303 303 restrictions apply: the effective privilege set of the
304 304 attaching process must be a superset of the target process'
305 305 effective, permitted and inheritable sets; the limit set must
306 306 be a superset of the target's limit set; if the target process
307 307 has any uid set to 0 all privilege must be asserted unless the
308 308 effective uid is 0.
309 309 Allows a process to bind arbitrary processes to CPUs.
310 310
311 -privilege PRIV_PROC_PRIOUP
311 +# XXX: This is made default merely for test purposes. DO NOT LEAVE HERE
312 +default privilege PRIV_PROC_PRIOUP
312 313
313 314 Allows a process to elevate its priority above its current level.
314 315
315 316 privilege PRIV_PROC_PRIOCNTL
316 317
317 318 Allows all that PRIV_PROC_PRIOUP allows.
318 319 Allows a process to change its scheduling class to any scheduling class,
319 320 including the RT class.
320 321
321 322 basic privilege PRIV_PROC_SESSION
322 323
323 324 Allows a process to send signals or trace processes outside its
324 325 session.
325 326
326 327 unsafe privilege PRIV_PROC_SETID
327 328
328 329 Allows a process to set its uids at will.
329 330 Assuming uid 0 requires all privileges to be asserted.
330 331
331 332 privilege PRIV_PROC_TASKID
332 333
333 334 Allows a process to assign a new task ID to the calling process.
334 335
335 336 privilege PRIV_PROC_ZONE
336 337
337 338 Allows a process to trace or send signals to processes in
338 339 other zones.
339 340
340 341 privilege PRIV_SYS_ACCT
341 342
342 343 Allows a process to enable and disable and manage accounting through
343 344 acct(2), getacct(2), putacct(2) and wracct(2).
344 345
345 346 privilege PRIV_SYS_ADMIN
346 347
347 348 Allows a process to perform system administration tasks such
348 349 as setting node and domain name and specifying nscd and coreadm
349 350 settings.
350 351
351 352 privilege PRIV_SYS_AUDIT
352 353
353 354 Allows a process to start the (kernel) audit daemon.
354 355 Allows a process to view and set audit state (audit user ID,
355 356 audit terminal ID, audit sessions ID, audit pre-selection mask).
356 357 Allows a process to turn off and on auditing.
357 358 Allows a process to configure the audit parameters (cache and
358 359 queue sizes, event to class mappings, policy options).
359 360
360 361 privilege PRIV_SYS_CONFIG
361 362
362 363 Allows a process to perform various system configuration tasks.
363 364 Allows a process to add and remove swap devices; when adding a swap
364 365 device, a process must also have sufficient privileges to read from
365 366 and write to the swap device.
366 367
367 368 privilege PRIV_SYS_DEVICES
368 369
369 370 Allows a process to successfully call a kernel module that
370 371 calls the kernel drv_priv(9F) function to check for allowed
371 372 access.
372 373 Allows a process to open the real console device directly.
373 374 Allows a process to open devices that have been exclusively opened.
374 375
375 376 privilege PRIV_SYS_IPC_CONFIG
376 377
377 378 Allows a process to increase the size of a System V IPC Message
378 379 Queue buffer.
379 380
380 381 privilege PRIV_SYS_LINKDIR
381 382
382 383 Allows a process to unlink and link directories.
383 384
384 385 privilege PRIV_SYS_MOUNT
385 386
386 387 Allows filesystem specific administrative procedures, such as
387 388 filesystem configuration ioctls, quota calls and creation/deletion
388 389 of snapshots.
389 390 Allows a process to mount and unmount filesystems which would
390 391 otherwise be restricted (i.e., most filesystems except
391 392 namefs).
392 393 A process performing a mount operation needs to have
393 394 appropriate access to the device being mounted (read-write for
394 395 "rw" mounts, read for "ro" mounts).
395 396 A process performing any of the aforementioned
396 397 filesystem operations needs to have read/write/owner
397 398 access to the mount point.
398 399 Only regular files and directories can serve as mount points
399 400 for processes which do not have all zone privileges asserted.
400 401 Unless a process has all zone privileges, the mount(2)
401 402 system call will force the "nosuid" and "restrict" options, the
402 403 latter only for autofs mountpoints.
403 404 Regardless of privileges, a process running in a non-global zone may
404 405 only control mounts performed from within said zone.
405 406 Outside the global zone, the "nodevices" option is always forced.
406 407
407 408 privilege PRIV_SYS_IPTUN_CONFIG
408 409
409 410 Allows a process to configure IP tunnel links.
410 411
411 412 privilege PRIV_SYS_DL_CONFIG
412 413
413 414 Allows a process to configure all classes of datalinks, including
414 415 configuration allowed by PRIV_SYS_IPTUN_CONFIG.
415 416
416 417 privilege PRIV_SYS_IP_CONFIG
417 418
418 419 Allows a process to configure a system's IP interfaces and routes.
419 420 Allows a process to configure network parameters using ndd.
420 421 Allows a process access to otherwise restricted information using ndd.
421 422 Allows a process to configure IPsec.
422 423 Allows a process to pop anchored STREAMs modules with matching zoneid.
423 424
424 425 privilege PRIV_SYS_NET_CONFIG
425 426
426 427 Allows all that PRIV_SYS_IP_CONFIG, PRIV_SYS_DL_CONFIG, and
427 428 PRIV_SYS_PPP_CONFIG allow.
428 429 Allows a process to push the rpcmod STREAMs module.
429 430 Allows a process to INSERT/REMOVE STREAMs modules on locations other
430 431 than the top of the module stack.
431 432
432 433 privilege PRIV_SYS_NFS
433 434
434 435 Allows a process to perform Sun private NFS specific system calls.
435 436 Allows a process to bind to ports reserved by NFS: ports 2049 (nfs)
436 437 and port 4045 (lockd).
437 438
438 439 privilege PRIV_SYS_PPP_CONFIG
439 440
440 441 Allows a process to create and destroy PPP (sppp) interfaces.
441 442 Allows a process to configure PPP tunnels (sppptun).
442 443
443 444 privilege PRIV_SYS_RES_BIND
444 445
445 446 Allows a process to bind processes to processor sets.
446 447
447 448 privilege PRIV_SYS_RES_CONFIG
448 449
449 450 Allows all that PRIV_SYS_RES_BIND allows.
450 451 Allows a process to create and delete processor sets, assign
451 452 CPUs to processor sets and override the PSET_NOESCAPE property.
452 453 Allows a process to change the operational status of CPUs in
453 454 the system using p_online(2).
454 455 Allows a process to configure resource pools and to bind
455 456 processes to pools
456 457
457 458 unsafe privilege PRIV_SYS_RESOURCE
458 459
459 460 Allows a process to modify the resource limits specified
460 461 by setrlimit(2) and setrctl(2) without restriction.
461 462 Allows a process to exceed the per-user maximum number of
462 463 processes.
463 464 Allows a process to extend or create files on a filesystem that
464 465 has less than minfree space in reserve.
465 466
466 467 privilege PRIV_SYS_SMB
467 468
468 469 Allows a process to access the Sun private SMB kernel module.
469 470 Allows a process to bind to ports reserved by NetBIOS and SMB:
470 471 ports 137 (NBNS), 138 (NetBIOS Datagram Service), 139 (NetBIOS
471 472 Session Service and SMB-over-NBT) and 445 (SMB-over-TCP).
472 473
473 474 privilege PRIV_SYS_SUSER_COMPAT
474 475
475 476 Allows a process to successfully call a third party loadable module
476 477 that calls the kernel suser() function to check for allowed access.
477 478 This privilege exists only for third party loadable module
478 479 compatibility and is not used by Solaris proper.
479 480
480 481 privilege PRIV_SYS_TIME
481 482
482 483 Allows a process to manipulate system time using any of the
483 484 appropriate system calls: stime, adjtime, ntp_adjtime and
484 485 the IA specific RTC calls.
485 486
486 487 privilege PRIV_SYS_TRANS_LABEL
487 488
488 489 Allows a process to translate labels that are not dominated
489 490 by the process' sensitivity label to and from an external
490 491 string form.
491 492 This privilege is interpreted only if the system is configured
492 493 with Trusted Extensions.
493 494
494 495 privilege PRIV_VIRT_MANAGE
495 496
496 497 Allows a process to manage virtualized environments such as
497 498 xVM(5).
498 499
499 500 privilege PRIV_WIN_COLORMAP
500 501
501 502 Allows a process to override colormap restrictions.
502 503 Allows a process to install or remove colormaps.
503 504 Allows a process to retrieve colormap cell entries allocated
504 505 by other processes.
505 506 This privilege is interpreted only if the system is configured
506 507 with Trusted Extensions.
507 508
508 509 privilege PRIV_WIN_CONFIG
509 510
510 511 Allows a process to configure or destroy resources that are
511 512 permanently retained by the X server.
512 513 Allows a process to use SetScreenSaver to set the screen
513 514 saver timeout value.
514 515 Allows a process to use ChangeHosts to modify the display
515 516 access control list.
516 517 Allows a process to use GrabServer.
517 518 Allows a process to use the SetCloseDownMode request which
518 519 may retain window, pixmap, colormap, property, cursor, font,
519 520 or graphic context resources.
520 521 This privilege is interpreted only if the system is configured
521 522 with Trusted Extensions.
522 523
523 524 privilege PRIV_WIN_DAC_READ
524 525
525 526 Allows a process to read from a window resource that it does
526 527 not own (has a different user ID).
527 528 This privilege is interpreted only if the system is configured
528 529 with Trusted Extensions.
529 530
530 531 privilege PRIV_WIN_DAC_WRITE
531 532
532 533 Allows a process to write to or create a window resource that
533 534 it does not own (has a different user ID). A newly created
534 535 window property is created with the window's user ID.
535 536 This privilege is interpreted only if the system is configured
536 537 with Trusted Extensions.
537 538
538 539 privilege PRIV_WIN_DEVICES
539 540
540 541 Allows a process to perform operations on window input devices.
541 542 Allows a process to get and set keyboard and pointer controls.
542 543 Allows a process to modify pointer button and key mappings.
543 544 This privilege is interpreted only if the system is configured
544 545 with Trusted Extensions.
545 546
546 547 privilege PRIV_WIN_DGA
547 548
548 549 Allows a process to use the direct graphics access (DGA) X protocol
549 550 extensions. Direct process access to the frame buffer is still
550 551 required. Thus the process must have MAC and DAC privileges that
551 552 allow access to the frame buffer, or the frame buffer must be
552 553 allocated to the process.
553 554 This privilege is interpreted only if the system is configured
554 555 with Trusted Extensions.
555 556
556 557 privilege PRIV_WIN_DOWNGRADE_SL
557 558
558 559 Allows a process to set the sensitivity label of a window resource
559 560 to a sensitivity label that does not dominate the existing
560 561 sensitivity label.
561 562 This privilege is interpreted only if the system is configured
562 563 with Trusted Extensions.
563 564
564 565 privilege PRIV_WIN_FONTPATH
565 566
566 567 Allows a process to set a font path.
567 568 This privilege is interpreted only if the system is configured
568 569 with Trusted Extensions.
569 570
570 571 privilege PRIV_WIN_MAC_READ
571 572
572 573 Allows a process to read from a window resource whose sensitivity
573 574 label is not equal to the process sensitivity label.
574 575 This privilege is interpreted only if the system is configured
575 576 with Trusted Extensions.
576 577
577 578 privilege PRIV_WIN_MAC_WRITE
578 579
579 580 Allows a process to create a window resource whose sensitivity
580 581 label is not equal to the process sensitivity label.
581 582 A newly created window property is created with the window's
582 583 sensitivity label.
583 584 This privilege is interpreted only if the system is configured
584 585 with Trusted Extensions.
585 586
586 587 privilege PRIV_WIN_SELECTION
587 588
588 589 Allows a process to request inter-window data moves without the
589 590 intervention of the selection confirmer.
590 591 This privilege is interpreted only if the system is configured
591 592 with Trusted Extensions.
592 593
593 594 privilege PRIV_WIN_UPGRADE_SL
594 595
595 596 Allows a process to set the sensitivity label of a window
596 597 resource to a sensitivity label that dominates the existing
597 598 sensitivity label.
598 599 This privilege is interpreted only if the system is configured
599 600 with Trusted Extensions.
600 601
601 602 privilege PRIV_XVM_CONTROL
602 603
603 604 Allows a process access to the xVM(5) control devices for
604 605 managing guest domains and the hypervisor. This privilege is
605 606 used only if booted into xVM on x86 platforms.
606 607
607 608 set PRIV_EFFECTIVE
608 609
609 610 Set of privileges currently in effect.
610 611
611 612 set PRIV_INHERITABLE
612 613
613 614 Set of privileges that comes into effect on exec.
614 615
615 616 set PRIV_PERMITTED
616 617
617 618 Set of privileges that can be put into the effective set without
618 619 restriction.
619 620
620 621 set PRIV_LIMIT
621 622
622 623 Set of privileges that determines the absolute upper bound of
623 624 privileges this process and its off-spring can obtain.
|
↓ open down ↓ |
302 lines elided |
↑ open up ↑ |
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX