Go to main content

Using Oracle® Solaris 11.4 StatsStore and System Web Interface

Exit Print View

Updated: February 2019
 
 

Statistics Store Authorizations and Administrative Profiles

By default, any user can read and record any data in the statistics store. Some other operations, such as reading sensitive data, require additional authorization. The following authorizations are available for operations on the statistics store. See the sstore-security(7) and sstore-authorized-user(7) man pages for more information. The root user or role has all solaris authorizations. See Securing Users and Processes in Oracle Solaris 11.4 for more information about authorizations, roles, and rights profiles.

Table 3  Statistics Store Operation Authorizations
Authorization
Authorized Operation
solaris.sstore.read.sensitive
Read a sensitive statistic or event.
solaris.sstore.capture.sensitive
Record a sensitive statistic or event.
solaris.sstore.capture.expensive
Record an expensive statistic or event.
solaris.sstore.update.res
Add a resource to a class or remove a resource from a class.
solaris.sstore.write
Provide statistic or event data.
solaris.sstore.delete
Purge statistic or event data.
solaris.sstore.configure
Update a collection created by another user.
solaris.smf.manage.sstore
Manage statistics store states.
solaris.smf.value.sstore
Change values of statistics store properties.

The following Oracle Solaris administrative profiles are available for operations on the statistics store. The System Administrator profile includes the Stat Store Management profile. The System Observability profile includes the Stat Store Read All profile.

Table 4  Oracle Solaris Statistics Store Administrative Profiles
Administrative Profile
Authorizations
Stat Store Management
solaris.smf.manage.sstore, solaris.smf.value.sstore, solaris.sstore.*
Stat Store Read All
solaris.sstore.read.sensitive, solaris.sstore.capture.sensitive, solaris.sstore.capture.expensive