NAME | SYNOPSIS | DESCRIPTION | OPTIONS | ATTRIBUTES | RETURN VALUES | EXAMPLES | SEE ALSO
pprivtest, a proc tools command, tests whether the priv_names privileges are a subset of the effective set of the process. priv_names is one of these:
A comma-separated list of privilege names, as reported by ppriv
A comma-separated list of numeric privilege IDs as found in </usr/include/sys/tsol/priv_names.h>
The keyword all to indicate all privileges
Without the -e (equal) option, the specified privileges are checked as a subset of the process privileges. pprivtest reports those privileges that are specified in priv_names but not found in the process. The -e option additionally reports privileges that the file has, but that were not specified in the pprivtest command.
Test the privilege set of the process specified by the process ID. If no process ID is specified, test the privilege set of the pprivtest command.
Test whether the specified privileges are equal to the effective privileges of the process.
Use silent mode to suppress outputs. (This option is useful in shell scripts that need only the return value.)
See attributes(5) for descriptions of the following attributes:
ATTRIBUTE TYPE | ATTRIBUTE VALUE |
---|---|
Availability | SUNWtsu |
pprivtest exits with one of these values:
All of the specified privileges are in the effective set.
With the -e option, the specified privileges are equal to the effective set of the process.
At least one of the specified privileges is not in the effective set of the process.
With the -e option, the specified privileges are not equal to the effective set of the process.
Use this command to test if the current process' privileges are exactly equal to the specified privileges:
example% pprivtest -e p1,p2 |
If the process privileges did not match exactly, the output could be in this example format:
example% 1298:missing:p2:extra:p3 |
proc(1), ppriv(1), priv_name(4)
NAME | SYNOPSIS | DESCRIPTION | OPTIONS | ATTRIBUTES | RETURN VALUES | EXAMPLES | SEE ALSO