getfsattr(1M)

NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | OPTIONS | DIAGNOSTICS | NOTES | SEE ALSO

NAME

getfsattr- Display file system security attributes

SYNOPSIS

getfsattr [-a| -f| -i| -I| -l| -L| -m| -p| -P| -s| -S]
[-Ffstype] [-ooption] [pathname...]

DESCRIPTION

getfsattr displays the specified security attributes of the file system on which pathname resides. If no option is specified, all the file system security attributes are displayed. If no pathname is given, the attributes of all mounted filesystems are displayed.

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWtsu

OPTIONS

-a

Display the file system access ACL.

-f

Display the file system attribute flags.

-l

Display the filesystem sensitivity level range in short form.

-L

Display the file system sensitivity level range in long form.

-m

Display the file system MLD prefix.

-p

Display the file system allowed privilege set.

-P

Display the file system forced privilege set.

-s

Display the file system sensitivity label in short form.

-S

Display the file system sensitivity label in long form.

-F fstype

Restrict the output to file systems of type fstype.

-o option

Specifies filesystem specific options. See the individual filesystem variants of getfsattr for details.

DIAGNOSTICS

getfsattr exits with one of the following values:

0

Success

1

Usage error

2

Failure, error message is the system error number from getfsattr(2).

NOTES

Information labels (ILs) are not supported in Trusted Solaris 7 and later releases. Trusted Solaris software interprets any ILs on communications and files from systems running earlier releases as ADMIN_LOW.

Objects still have CMW labels, and CMW labels still include the IL component: IL[SL]; however, the IL component is fixed at ADMIN_LOW.

As a result, Trusted Solaris 7 has the following characteristics:

• ILs do not display in window labels; SLs (Sensitivity Labels) display alone within brackets.

• ILs do not float.

• Setting an IL on an object has no effect.

• Getting an object's IL will always return ADMIN_LOW.

• Although certain utilities, library functions, and system calls can manipulate IL strings, the resulting ILs are always ADMIN_LOW, and cannot be set on any objects.

SEE ALSO

Trusted Solaris 7 Reference Manual

getfsattr_ufs(1M), getfsattr(2), vfstab_adjunct(4)

SunOS 5.7 Reference Manual

attributes(5)

Trusted Solaris 7  Last Revised 30 Sep 1999

NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | OPTIONS | DIAGNOSTICS | NOTES | SEE ALSO