> Whether pfexec grants you those privileges or not depends on what > privileges you have been given in the authorizations database.
... and given that /etc/security/exec_attr currently contains: Network Link Security:solaris:cmd:::/sbin/dladm:euid=dladm;egid=sys; privs=sys_net_config,net_rawaccess,proc_audit Network Management:solaris:cmd:::/sbin/dladm:euid=dladm;egid=sys; privs=sys_net_config,net_rawaccess,proc_audit ... things should "just work" with pfexec. Indeed, a simple experiment: $ profiles Primary Administrator Console User Suspend To RAM Suspend To Disk Brightness CPU Power Management Basic Solaris User All $ dladm show-link dladm: insufficient privileges $ pfexec dladm show-link LINK CLASS MTU STATE OVER bge0 phys 1500 up -- $ pfexec dladm create-vlan -v2 -l bge0 foo2 $ pfexec dladm show-link LINK CLASS MTU STATE OVER bge0 phys 1500 up -- foo2 vlan 1500 up bge0 -- meem
