The priv_name File

The following is the format for an entry in /usr/lib/tsol/locale/locale_name/priv_name:

number:name:description

The value of number in the priv_name(4) file must match the privilege ID in the /usr/include/sys/tsol/priv_names.h file. name must be concise and descriptive for display in user interfaces.

description describes the activity permitted by the privilege. The definition guides the Security Administrator role when assigning privileges to programs.

The following is an example of a privilege in the default priv_name file:

4:file_dac_read:Allows a process to read a file or directory \
whose permission bits or ACL do not allow the process read permission.