thx bart,
it was exactly my intent. maybe the fain grain access policy project will have
to change it that way (http://opensolaris.org/os/project/fgap/)
>From usermod perspective, behavior between profiles and ppriv is not
>consistant as ppriv will delete every privileges not specified but profile
>will always include "All" and "Basic Solaris User".
Furthermore I think the man page is incorrect stating :
-P profile
One or more comma-separated rights profiles defined in prof_attr(4). This
replaces any existing profile setting. If no profile list is specified, the
existing setting is removed.
Benjamin Brumaire
This message posted from opensolaris.org
