add_allocatable(1M)

NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | OPTIONS | ERRORS | FILES | SEE ALSO

NAME

add_allocatable- Add entries to allocation databases and create ancillary file

SYNOPSIS

/usr/sbin/add_allocatable [-f] -n name -t type -d device-list [-l minSL] [-h maxSL] [-a authorization] [-c clean]

DESCRIPTION

add_allocatable creates or updates database entries for allocatable devices and certain non-allocatable devices and creates an ancillary file used by the allocate(1M) command to control access to an allocatable device. add_allocatable updates the device_allocate(4) and device_maps(4) databases, and it creates the ancillary file in /etc/security/dev for the specified device. The database entries and the ancillary file are needed when devices are user-allocatable. The database entries are also needed for the frame buffer and printers because the label ranges for these non-allocatable devices are managed by the device allocation mechanism.

add_allocatable can be used in shell scripts, such as installation scripts for driver packages, to automate the administrative work of setting up a new device.

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWtsu

OPTIONS

-f

Force an update of an already-existing entry with the specified information. add_allocatable exits with an error if this option is not specified when an entry with the specified device name already exists.

-n name

Puts a device name name into the device-name fields of the device's entries in device_allocate and device_maps and create a zero-length ancillary file of that name in /etc/security/dev.

-t type

Puts a device type type into the device-type fields of the device's entries in device_allocate and device_maps.

-d device-list

Puts the device special file names specified in device-list into the device-list field of the device's entry in device_maps. The list of devices must be separated by white space, and the list must be quoted because white spaces are treated by the shell as argument delimiters.

-l minSL

Puts the minimum sensitivity label minSL of the device into the dev-minimum field of the device's entry in device_allocate. The default sensitivity label ADMIN_LOW is used when this optional argument is not specified.

-h maxSL

Puts the maximum sensitivity label maxSL into the dev-maximum field of the device's entry in device_allocate. The default sensitivity label ADMIN_HIGH is used when this optional argument is not specified.

-a authorization

Puts one or more authorizations or other characters specified in authorization into the device authorization field of the device's entry in device_allocate. When more than one authorization is specified, the list must be separated by commas and must be quoted. When the device is not allocatable, authorization is specified with an asterisk (*) and must be quoted. When the device is allocatable and is allocatable by any user, authorization is specified with the at sign (@) and must be quoted. When this optional argument is not specified, the default value '@' is used, and the device is allocatable by any user with no authorization required.

-c clean

Puts the device_clean(1M) program clean into the device-clean field of the device's entry in device_allocate(4). The default value /bin/true is used when this optional argument is not specified.

ERRORS

When successful, add_allocate returns an exit status of 0 (true). add_allocate returns a nonzero exit status in the event of an error. The exit codes are as follows:

1

Invocation syntax error

2

Unknown system error

3

A device_allocate entry already exists. This error occurs only when the -f option is not specified.

4

Permission denied. User does not have DAC or MAC access to database.

FILES

/etc/security/device_allocate

Mandatory access control file for devices

/etc/security/tsol/device_maps

List of physical devices associated with a device name and type

SEE ALSO

Trusted Solaris 7 Reference Manual

allocate(1M), device_allocate(4), device_clean(1M), device_maps(4), remove_allocatable(1M)

SunOS 5.7 Reference Manual

attributes(5)

Trusted Solaris 7  Last Revised 4 April 1998

NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | OPTIONS | ERRORS | FILES | SEE ALSO