man pages section 1: User Commands

userattr(1)

Name

userattr - print attribute value granted to a user or role

Synopsis

userattr [-v] attribute_name [user]

Description

The userattr command prints on standard output the first value found for the attribute attribute_name. If user is not specified, the user is taken from the real user ID of the process. Attribute names are those found defined in user_attr(5) and prof_attr(5). Use the profiles(1) command for the profiles assigned to a user. Use the auths(1) command for the authorizations assigned to a user. The order of search is the user's user_attr entry followed by the user's profiles.

If the attribute, attribute_name, is not assigned to the user, and for any errors, userattr returns a non-zero exit code. Otherwise, userattr returns a zero exit code.

The –v option additionally prints where the attribute was found.

Examples

Example 1 Using userattr

example% userattr lock_after_retries root
no

Files

/etc/user_attr

/etc/security/policy.conf

/etc/security/prof_attr

Exit Status

The following exit values are returned:

0

Successful completion.

1

An error occurred.

Attributes

See attributes(7) for descriptions of the following attributes:

ATTRIBUTE TYPE ATTRIBUTE VALUE Availability system/core-os Interface Stability See below.

The exit code is Committed. The output for the –v option is Not-an-Interface.

See Also

auths(1), profiles(1), policy.conf(5), prof_attr(5), user_attr(5), attributes(7), rbac(7)

History

The userattr command was added in Solaris 11.0.0.