How to View Device Policy

  1. Display the device policy for all devices on your system.
    $ getdevpolicy | more
    DEFAULT
    read_priv_set=none
    write_priv_set=none
    ip:*
    read_priv_set=net_rawaccess
    write_priv_set=net_rawaccess
    …

Example 4-1 Viewing the Device Policy for a Specific Device

In this example, the device policy for three devices is displayed.

$ getdevpolicy /dev/allkmem /dev/ipsecesp /dev/net0
/dev/allkmem
read_priv_set=all
write_priv_set=all
/dev/ipsecesp
read_priv_set=sys_net_config
write_priv_set=sys_net_config
/dev/bge
read_priv_set=net_rawaccess
write_priv_set=net_rawaccess