Kevin Kammer wrote: > Is it possible to grant a process a specific privilege directly, without > going through a rights profile? > > Specifically, I want a given binary to run with PRIV_PROC_LOCK_MEMORY > whenever it runs, regardless of who or what calls it, and not requiring it to > be called in a profile shell or with pfexec. >
You could add it to PRIV_DEFAULT= in /etc/security/policy.conf, this would give the priv to everyone. benr. _______________________________________________ sysadmin-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/sysadmin-discuss
