1. Securing Systems and Attached Devices in Oracle Solaris 11.4
  2. Controlling Access to Devices
  3. Device Protection Reference
  4. Device Allocation
  5. Components of Device Allocation

Components of Device Allocation

The components of the device allocation mechanism are as follows:

  • The svc:/system/device/allocate service. For more information, see the smf(7) man page and the man pages for the device allocation commands.

  • The allocate, deallocate, dminfo, and list_devices commands. For more information, see Device Allocation Commands.

  • The Device Management and Device Security rights profiles. For more information, see Device Allocation Rights Profiles.

  • Device-clean scripts for each allocatable device.

These commands and scripts use the following local files to implement device allocation:

  • The /etc/security/device_allocate file. For more information, see the device_allocate(5) man page.

  • The /etc/security/device_maps file. For more information, see the device_maps(5) man page.

  • A lock file, in the /etc/security/dev directory, for each allocatable device.

  • The changed attributes of the lock files that are associated with each allocatable device.