Securing Users and Processes in Oracle® Solaris 11.2

Exit Print View

Updated: July 2014
 
 

How to Reorder Assigned Rights

You must reorder a user's rights profiles assignments when an unprivileged command is in effect for the user rather than its privileged version. For more information, see Order of Search for Assigned Rights.

Before You Begin

You must become an administrator who is assigned the User Security rights profile. For more information, see Using Your Assigned Administrative Rights.

  1. View the list of rights profiles that are currently assigned to the user or role.

    The list displays in order.

    % profiles username | rolename
  2. Assign the rights profiles in the correct order.
    # usermod | rolemod -P "list-of-profiles"
Example 7-4  Assigning Rights Profiles in a Specific Order

In this example, the administrator determines that a rights profile with privileged commands is listed after the All rights profile for the role devadmin.

# profiles devadmin

    Basic Solaris User
    All
    Device Management

Therefore, the devadmin role cannot run the device management commands with the role's assigned privileges.

The administrator reassigns the rights profiles to devadmin. In the new order of assignment, the device management commands run with their assigned privileges.

# rolemod -P "Device Management,Basic Solaris User,All"

# profiles devadmin

    Device Management
    Basic Solaris User
    All