Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 520
  • Last Modified:

What is privilege in exec_attr ?

Can we use privileges instead of using uid and euid? I heard of some privilege like 'sys_net_config' and 'net_rawaccess'. Could someone give me more insights in using the privilege in RBAC. Thanks!
0
beer9
Asked:
beer9
  • 2
1 Solution
 
Brian UtterbackPrinciple Software EngineerCommented:
It depends on what you want to do and what you want to accomplish. You can add privileges directly to an account in the
user_attr file, and after that that account will be able to run the commands that need those privs. For instance, I  do a lot of
debugging on my lab system, so I add dtrace_user, dtrace_proc and dtrace_kernel to my priv list. that way I can use
dtrace without doing anything special, I can just do it.

On the other hand, I also add the "Primary Administrator" role to my profile. This gives me all privs, just as if I were root, but
only when I use the pfexec command.

The exec_attr file specifies what happens when certain roles execute certain commands.

So, what are you really trying to do?
0
 
beer9Author Commented:
Thanks blu for the explanation. It was just my random curiosity and want to know more about it. I want to use it in my lab in order or learn more. Could you please give me step by step procedure to add priv in a user's account.

What are the list of priv, and there associated command ? Many Thanks! :-)
0
 
beer9Author Commented:
Thansk blu :-)
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now