policy.conf File

The policy.conf file provides a way of granting specific rights profiles, specific authorizations, and specific privileges to all users. The relevant entries in the file consist of key=value pairs:

• AUTHS_GRANTED=authorizations – Refers to one or more authorizations.

• PROFS_GRANTED=rights profiles – Refers to one or more rights profiles.

• PRIV_DEFAULT=privileges – Refers to one or more privileges.

• PRIV_LIMIT=privileges – Refers to all privileges.

The following example shows some typical values from a policy.conf database:

# grep AUTHS /etc/security/policy
AUTHS_GRANTED=solaris.device.cdrw

# grep PROFS /etc/security/policy
PROFS_GRANTED=Basic Solaris User

# grep PRIV /etc/security/policy

#PRIV_DEFAULT=basic
#PRIV_LIMIT=all

For more information about privileges, see Privileges (Overview).