Go to main content

man pages section 1: User Commands

Exit Print View

Updated: Wednesday, February 9, 2022
 
 

plabel(1)

Name

plabel - get or set the label of a process

Synopsis

/usr/bin/plabel [-sS] [pid...]
/usr/bin/plabel [-sS] -l clearance pid...

Description

The plabel command gets or sets the label of a process. If the pid is not specified, the label displayed is that of the plabel command. When options are not specified, the output format of the label is displayed in default format.

When Trusted Extensions is enabled, the label corresponds to the label of the current zone and cannot be changed. Otherwise the label represents the process clearance.

Options

–l

Applies the specified clearance to each process in the pid list. The clearance of the current plabel process must dominate the specified clearance, as well as the clearance of each of the target processes. The effective privilege set of the current process must be a superset of permitted privilege set of each target processes. The privilege proc_owner is also required to set the clearance of any process that is not owned by the current process.

This option is not supported when Trusted Extensions are enabled.

–s

Display the label that is associated with pid in short form.

–S

Display the label that is associated with pid in long form.

Exit Status

plabel exits with one of the following values:

0

Successful completion.

1

Unsuccessful completion because of a usage error or insufficient privilege.

2

Inability to translate label.

3

Inability to allocate memory.

Attributes

See attributes(7) for descriptions of the following attributes:

ATTRIBUTE TYPE
ATTRIBUTE VALUE
Availability
system/file_labeling
Interface Stability
See below.

The plabel utility is Committed. The output is Not-an-Interface.

See Also

proc(1), getplabel(3TSOL), getclearance(3TSOL), attributes(7), labels(7)

History

The –l option, and support for process clearances on systems not running Trusted Extensions, was added in Oracle Solaris 11.4.0.

The plabel command was added to Solaris in Solaris 10 4/08 (Update 5). Prior to that it was included in the Trusted Extensions add-on for Solaris.