sysh(1M)

NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | SEE ALSO | WARNINGS | NOTES

NAME

sysh- System shell

SYNOPSIS

sysh [-acefhiknpPrstuvx] [argument...]

DESCRIPTION

sysh, the system shell, is a modified version of the Bourne shell, sh(1). sysh is used to control the use of privileges in commands run from the rc scripts. sysh allows any command to be executed but consults profiles for the privileges, user ID (UID), group ID (GID), and sensitivity label (SL) with which the command is to be run.

The system shell can be run only from a process with the Trusted Path attribute.

Usage

Refer to the sh(1) man page for a complete usage description. sysh adds the setprof and clist commands.

Commands

setprof [ profilename ]

sysh uses the specified profile to determine security attributes and privileges for executing subsequent commands. This switch is useful when the same command needs to be run with different privileges at different times. The default profile is the "boot" profile, used when sysh starts up and when setprof is called with no arguments.

clist [ -hpnilu ]

Displays list of the commands that are permitted for the user.

-h

Includes a hexadecimal list of the privileges assigned to each command in the command list.

-p

Includes a list of the privileges assigned to each command in the command list. The list is in text form.

-n

Includes a comma-separated decimal list of the privileges assigned to each command in the command list.

-i

Includes the UID and GID assigned to each command in the command list.

-l

Includes the SL assigned to each command in the command list.

-u

Lists only those commands for which the profile assigned privileges that sysh does not have. (See WARNINGS.)

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWtsrSUNWtsu

SEE ALSO

Trusted Solaris 7 Reference Manual

tsolprof(4)

SunOS 5.7 Reference Manual

sh(1), attributes(5)

WARNINGS

sysh normally has all privileges forced so it can run commands with privileges. If sysh finds that a command needs privileges that sysh is not permitted, a warning message is printed and the command is run with no privileges.

NOTES

These interfaces are uncommitted. Although they are not expected to change between minor releases of the Trusted Solaris environment, they may.

Trusted Solaris 7  Last Revised 26 Mar 1998

NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | SEE ALSO | WARNINGS | NOTES