getfsattr(1M)

NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | OPTIONS | EXIT STATUS | NOTES | SEE ALSO

NAME

getfsattr- Display file system security attributes

SYNOPSIS

getfsattr [-i| -I| -l| -L| -m| -p| -P| -s| -S]
[-Ffstype] [-ooption] [pathname...]

DESCRIPTION

getfsattr displays the specified security attributes of the file system on which pathname resides. If no option is specified, all the file system security attributes are displayed. If no pathname is given, the attributes of all mounted filesystems are displayed.

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWtsu

OPTIONS

-l

Display the filesystem sensitivity level range in short form.

-L

Display the file system sensitivity level range in long form.

-m

Display the file system MLD prefix.

-p

Display the file system allowed privilege set.

-P

Display the file system forced privilege set.

-s

Display the file system sensitivity label in short form.

-S

Display the file system sensitivity label in long form.

-F fstype

Restrict the output to file systems of type fstype.

-o option

Specifies filesystem specific options. See the individual filesystem variants of getfsattr, such as getfsattr_ufs, for details.

EXIT STATUS

getfsattr exits with one of the following values:

0

Success

1

Usage error

2

Failure, error message is the system error number from getfsattr(2).

NOTES

Information labels (ILs) are not supported in Trusted Solaris 7 and later releases. Trusted Solaris software interprets any ILs on communications and files from systems running earlier releases as ADMIN_LOW.

Objects still have CMW labels, and CMW labels still include the IL component: IL[SL]; however, the IL component is fixed at ADMIN_LOW.

As a result, Trusted Solaris 7 and later releases have the following characteristics:

• ILs do not display in window labels; SLs (Sensitivity Labels) display alone within brackets.

• ILs do not float.

• Setting an IL on an object has no effect.

• Getting an object's IL will always return ADMIN_LOW.

• Although certain utilities, library functions, and system calls can manipulate IL strings, the resulting ILs are always ADMIN_LOW, and cannot be set on any objects.

SEE ALSO

Trusted Solaris 8 Reference Manual

getfsattr_ufs(1M), getfsattr(2), vfstab_adjunct(4)

SunOS 5.8 Reference Manual

attributes(5)

Trusted Solaris 8  Last Revised 18 Oct 2000

NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | OPTIONS | EXIT STATUS | NOTES | SEE ALSO