36 .sp
37 .LP
38 The \fBpfexec\fR program is used to execute commands with the attributes
39 specified by the user's profiles in the \fBexec_attr\fR(4) database. It is
40 invoked by the profile shells, \fBpfsh\fR, \fBpfcsh\fR, and \fBpfksh\fR which
41 are linked to the Bourne shell, C shell, and Korn shell, respectively.
42 .sp
43 .LP
44 Profiles are searched in the order specified in the user's entry in the
45 \fBuser_attr\fR(4) database. If the same command appears in more than one
46 profile, the profile shell uses the first matching entry.
47 .sp
48 .LP
49 The second form, \fBpfexec\fR \fB-P\fR \fIprivspec\fR, allows a user to obtain
50 the additional privileges awarded to the user's profiles in \fBprof_attr\fR(4).
51 The privileges specification on the commands line is parsed using
52 \fBpriv_str_to_set\fR(3C). The resulting privileges are intersected with the
53 union of the privileges specified using the "\fBprivs\fR" keyword in
54 \fBprof_attr\fR(4) for all the user's profiles and added to the inheritable set
55 before executing the command.
56 .SH USAGE
57 .sp
58 .LP
59 \fBpfexec\fR is used to execute commands with predefined process attributes,
60 such as specific user or group \fBID\fRs.
61 .sp
62 .LP
63 Refer to the \fBsh\fR(1), \fBcsh\fR(1), and \fBksh\fR(1) man pages for complete
64 usage descriptions of the profile shells.
65 .SH EXAMPLES
66 .LP
67 \fBExample 1 \fRObtaining additional user privileges
68 .sp
69 .in +2
70 .nf
71 example% \fBpfexec -P all chown user file\fR
72 .fi
73 .in -2
74 .sp
75
87 .na
88 \fB\fB0\fR \fR
89 .ad
90 .RS 6n
91 Successful completion.
92 .RE
93
94 .sp
95 .ne 2
96 .na
97 \fB\fB1\fR \fR
98 .ad
99 .RS 6n
100 An error occurred.
101 .RE
102
103 .SH SEE ALSO
104 .sp
105 .LP
106 \fBcsh\fR(1), \fBksh\fR(1), \fBprofiles\fR(1), \fBsh\fR(1), \fBexec_attr\fR(4),
107 \fBprof_attr\fR(4), \fBuser_attr\fR(4), \fBattributes\fR(5)
|
36 .sp
37 .LP
38 The \fBpfexec\fR program is used to execute commands with the attributes
39 specified by the user's profiles in the \fBexec_attr\fR(4) database. It is
40 invoked by the profile shells, \fBpfsh\fR, \fBpfcsh\fR, and \fBpfksh\fR which
41 are linked to the Bourne shell, C shell, and Korn shell, respectively.
42 .sp
43 .LP
44 Profiles are searched in the order specified in the user's entry in the
45 \fBuser_attr\fR(4) database. If the same command appears in more than one
46 profile, the profile shell uses the first matching entry.
47 .sp
48 .LP
49 The second form, \fBpfexec\fR \fB-P\fR \fIprivspec\fR, allows a user to obtain
50 the additional privileges awarded to the user's profiles in \fBprof_attr\fR(4).
51 The privileges specification on the commands line is parsed using
52 \fBpriv_str_to_set\fR(3C). The resulting privileges are intersected with the
53 union of the privileges specified using the "\fBprivs\fR" keyword in
54 \fBprof_attr\fR(4) for all the user's profiles and added to the inheritable set
55 before executing the command.
56 .sp
57 .LP
58 For \fBpfexec\fR to function correctly, the \fBpfexecd\fR daemon must be running
59 in the current zone. This is normally managed by the
60 "\fBsvc:/system/pfexec:default\fR" SMF service (see \fBsmf\fR(5)).
61 .SH USAGE
62 .sp
63 .LP
64 \fBpfexec\fR is used to execute commands with predefined process attributes,
65 such as specific user or group \fBID\fRs.
66 .sp
67 .LP
68 Refer to the \fBsh\fR(1), \fBcsh\fR(1), and \fBksh\fR(1) man pages for complete
69 usage descriptions of the profile shells.
70 .SH EXAMPLES
71 .LP
72 \fBExample 1 \fRObtaining additional user privileges
73 .sp
74 .in +2
75 .nf
76 example% \fBpfexec -P all chown user file\fR
77 .fi
78 .in -2
79 .sp
80
92 .na
93 \fB\fB0\fR \fR
94 .ad
95 .RS 6n
96 Successful completion.
97 .RE
98
99 .sp
100 .ne 2
101 .na
102 \fB\fB1\fR \fR
103 .ad
104 .RS 6n
105 An error occurred.
106 .RE
107
108 .SH SEE ALSO
109 .sp
110 .LP
111 \fBcsh\fR(1), \fBksh\fR(1), \fBprofiles\fR(1), \fBsh\fR(1), \fBexec_attr\fR(4),
112 \fBprof_attr\fR(4), \fBuser_attr\fR(4), \fBattributes\fR(5), \fBsmf\fR(5)
|