plabel - get or set the label of a process
/usr/bin/plabel [-sS] [pid...]
/usr/bin/plabel [-sS] -l clearance pid...
The plabel command gets or sets the label of a process. If the pid is not specified, the label displayed is that of the plabel command. When options are not specified, the output format of the label is displayed in default format.
When Trusted Extensions is enabled, the label corresponds to the label of the current zone and cannot be changed. Otherwise the label represents the process clearance.
Applies the specified clearance to each process in the pid list. The clearance of the current plabel process must dominate the specified clearance, as well as the clearance of each of the target processes. The effective privilege set of the current process must be a superset of permitted privilege set of each target processes. The privilege proc_owner is also required to set the clearance of any process that is not owned by the current process.
This option is not supported when Trusted Extensions are enabled.
Display the label that is associated with pid in short form.
Display the label that is associated with pid in long form.
plabel exits with one of the following values:
Successful completion.
Unsuccessful completion because of a usage error or insufficient privilege.
Inability to translate label.
Inability to allocate memory.
See attributes(7) for descriptions of the following attributes:
|
The plabel utility is Committed. The output is Not-an-Interface.
proc(1), getplabel(3TSOL), getclearance(3TSOL), attributes(7), labels(7)
The –l option, and support for process clearances on systems not running Trusted Extensions, was added in Oracle Solaris 11.4.0.
The plabel command was added to Solaris in Solaris 10 4/08 (Update 5). Prior to that it was included in the Trusted Extensions add-on for Solaris.