Print this page
OS-5440 pfexec and the case of the missing error message
Reviewed by: Joshua M. Clulow <jmc@joyent.com>
Reviewed by: Patrick Mooney <patrick.mooney@joyent.com>
        
@@ -51,10 +51,15 @@
 The privileges specification on the commands line is parsed using
 \fBpriv_str_to_set\fR(3C). The resulting privileges are intersected with the
 union of the privileges specified using the "\fBprivs\fR" keyword in
 \fBprof_attr\fR(4) for all the user's profiles and added to the inheritable set
 before executing the command.
+.sp
+.LP
+For \fBpfexec\fR to function correctly, the \fBpfexecd\fR daemon must be running
+in the current zone. This is normally managed by the
+"\fBsvc:/system/pfexec:default\fR" SMF service (see \fBsmf\fR(5)).
 .SH USAGE
 .sp
 .LP
 \fBpfexec\fR is used to execute commands with predefined process attributes,
 such as specific user or group \fBID\fRs.
@@ -102,6 +107,6 @@
 
 .SH SEE ALSO
 .sp
 .LP
 \fBcsh\fR(1), \fBksh\fR(1), \fBprofiles\fR(1), \fBsh\fR(1), \fBexec_attr\fR(4),
-\fBprof_attr\fR(4), \fBuser_attr\fR(4), \fBattributes\fR(5)
+\fBprof_attr\fR(4), \fBuser_attr\fR(4), \fBattributes\fR(5), \fBsmf\fR(5)