pprivtest(1)

NAME | SYNOPSIS | DESCRIPTION | OPTIONS | ATTRIBUTES | RETURN VALUES | EXAMPLES | SEE ALSO

NAME

pprivtest- Test effective privilege set of the process

SYNOPSIS

/usr/bin/pprivtest [-e] [-s] [-p pid] priv_names

DESCRIPTION

pprivtest, a proc tools command, tests whether the priv_names privileges are a subset of the effective set of the process. priv_names is one of these:

• A comma-separated list of privilege names, as reported by ppriv

• A comma-separated list of numeric privilege IDs as found in </usr/include/sys/tsol/priv_names.h>

• The keyword all to indicate all privileges

Without the -e (equal) option, the specified privileges are checked as a subset of the process privileges. pprivtest reports those privileges that are specified in priv_names but not found in the process. The -e option additionally reports privileges that the file has, but that were not specified in the pprivtest command.

OPTIONS

-p pid

Test the privilege set of the process specified by the process ID. If no process ID is specified, test the privilege set of the pprivtest command.

-e

Test whether the specified privileges are equal to the effective privileges of the process.

-s

Use silent mode to suppress outputs. (This option is useful in shell scripts that need only the return value.)

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWtsu

RETURN VALUES

pprivtest exits with one of these values:

0

All of the specified privileges are in the effective set.

With the -e option, the specified privileges are equal to the effective set of the process.

1

At least one of the specified privileges is not in the effective set of the process.

With the -e option, the specified privileges are not equal to the effective set of the process.

EXAMPLES

---

Example 1 pprivtest -e Equal Privilege Test




Use this command to test if the current process' privileges are exactly equal to the specified privileges:

example% pprivtest -e p1,p2

---

---

Example 2 pprivtest Output




If the process privileges did not match exactly, the output could be in this example format:

example% 1298:missing:p2:extra:p3

---

SEE ALSO

Trusted Solaris 8 Reference Manual

proc(1), ppriv(1), priv_name(4)

SunOS 5.8 Reference Manual

attributes(5)

Trusted Solaris 8  Last Revised 20 Apr 2000

NAME | SYNOPSIS | DESCRIPTION | OPTIONS | ATTRIBUTES | RETURN VALUES | EXAMPLES | SEE ALSO