setppriv(2)

NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | ERRORS | SEE ALSO

NAME

getppriv, setppriv– Return or assign a privilege set associated with the invoking process

SYNOPSIS

cc [flags…] file… -ltsol


#include <tsol/priv.h>

int getppriv(priv_ptype_ttype, priv_set_t*pset);
int setppriv(priv_op_top, priv_ptype_ttype, priv_set_t*pset);

DESCRIPTION

getppriv() copies the type privilege set of the invoking process into the pset address. type may have one of four values, specified in <tsol/priv.h>:

PRIV_EFFECTIVE

The effective privilege set

PRIV_INHERITABLE

The inheritable privilege set

PRIV_PERMITTED

The permitted privilege set

PRIV_SAVED

The saved privilege set

setppriv() assigns or modifies the type privilege set (the target set) of the invoking process. Modification occurs according to the values of op and of the pset privilege set (the source set). op values are specified in <tsol/priv.h>:

PRIV_ON

Each privilege asserted in the source set is asserted in the target set.

PRIV_OFF

Each privilege asserted in the source set is cleared in the target set.

PRIV_SET

The target set is made exactly equal to the source set.

Values for type are the same as those for type in getppriv(), exclusive of PRIV_SAVED.

If the target set is the permitted set, all privileges cleared from the target set are also cleared from the effective set. Any attempted assignment of a privilege cleared in the permitted set is always an error. Attempting to clear a privilege that is already cleared is not an error.

RETURN VALUES

getppriv() and setppriv() return:

0

On success.

-1

On failure, and set errno to indicate the error.

ERRORS

getppriv() fails if either of these conditions prevails:

EINVAL

An illegal or undefined value was supplied for type.

EFAULT

pset refers to an invalid address.

setppriv() fails and the target set is not modified if any of these conditions prevails:

EINVAL

An illegal or undefined value is supplied for type or op.

EFAULT

set refers to an invalid address.

EINVAL

In a process privilege set, an attempt is made to assert a privilege that is cleared in the permitted set of the process.

SEE ALSO

Trusted Solaris 8 HW 12/02 Reference Manual

getfpriv(2), setfpriv(2), priv_to_str(3TSOL), priv_set_to_str(3TSOL), str_to_priv(3TSOL), str_to_priv_set(3TSOL), priv_macros(5)

SunOS 5.8  Last Revised 08 Mar 1995

NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | ERRORS | SEE ALSO