Hi, 

 Couple of issues with SMF and RBAC on Solaris 10 6/06. 


1. auth name that don't start with solaris are not recognized in  /etc/ 
security/auth_attr 


2. Not able to assign auths using rights profiles to roles 


$ id 
uid=229294(svcxadm) gid=1(other) 


$ profiles 
svcX Administration 
All 
Basic Solaris User 


# grep -i svcx /etc/security/prof_attr 
svcX Administration::::Rights Profile used to manage svcX 
service:auths=solaris.smf.manage.svcX/inst1,solaris.smf.modify.svcX/ 
inst1:: 


# grep -i svcx /etc/security/auth_attr 
solaris.smf.manage.svcX/inst1::::Manage svcX::help=test 
solaris.smf.modify.ldap/ds52::::Modify svcX::help=test 


# grep -i svcx "/etc/user_attr" 
svcxadm::::type=role;profiles=svcX Administration,All 


$ id 
uid=229294(svcxadm) gid=1(other) 


$ grep svcxadm /etc/user_attr 
svcxadm::::type=role;profiles=svcX Administration,All 


$ auths 
solaris.device.cdrw,solaris.profmgr.read,solaris.jobs.users,solaris.mail.ma?ilq,solaris.admin.usermgr.read,solaris.admin.logsvc.read,solaris.admin.fsmg?r.read,solaris.admin.serialmgr.read,solaris.admin.diskmgr.read,solaris.admi?n.procmgr.user,solaris.compsys.read,solaris.admin.printer.read,solaris.admi?n.prodreg.read,solaris.admin.dcmgr.read,solaris.snmp.read,solaris.project.r?ead,solaris.admin.patchmgr.read,solaris.network.hosts.read,solaris.admin.vo?lmgr.read
 


missing auths for svcX 


any ideas?
 
 
This message posted from opensolaris.org

Reply via email to