filepriv(1M)

╖┴╝░

filepriv -d file . . .

╡í╟╜└Γ╠└

Ñ│Ñ▐Ñ≤Ñ╔ѬÑ╫Ñ╖ÑτÑ≤

-d

╗╪─Ωñ╖ñ┐Ñ╒ÑíÑñÑδñ╦┬╨▒■ñ╣ñδ╞├╕óñ≥║∩╜ⁿñ╣ñδñ┐ñßñ╦╗╚═╤ñ╖ñ▐ñ╣íúñ▐ñ┐íó┬╕║▀ñ╖ñ╩ññÑ╒ÑíÑñÑδñ≥╞├╕óÑ╟í╝Ñ┐Ñ╒ÑíÑñÑδ (PDF) ñ½ñΘ║∩╜ⁿñ╣ñδñ┐ñßñ╦╗╚═╤ñ╖ñ▐ñ╣íú

-f priv,priv, . . .

╗╪─Ωñ╖ñ┐Ñ╒ÑíÑñÑδñ╦┬╨▒■ñ╣ñδ╕╟─Ω╞├╕óñ≥╗╪─Ωñ╣ñδñ┐ñßñ╦╗╚═╤ñ╖ñ▐ñ╣íú

-i priv,priv, . . .

╗╪─Ωñ╖ñ┐Ñ╒ÑíÑñÑδñ╦┬╨▒■ñ╣ñδ╖╤╛╡╞├╕óñ≥╗╪─Ωñ╣ñδñ┐ñßñ╦╗╚═╤ñ╖ñ▐ñ╣íú

 
   priv [ +|-priv_name . . . ] set_name  [ . . . ] 

priv_name ñ╬├═ñ╧╝íñ╬ñ╚ñ¬ñΩñ╟ñ╣íú

allprivs

▓─╟╜ñ╩╞├╕óñ≥ñ╣ñ┘ñ╞╔╜ñ╖ñ▐ñ╣íú

audit

Ñ╗Ñ¡ÑσÑΩÑ╞Ñú┤╞║║ÑßѽÑ╦Ñ║Ñαñ╬┴α║εñ╬ñ┐ñßñ╦╔¼═╫ñ╟ñ╣íú

auditwr

┤╞║║╛┌└╫ñ╦ñ╡ñ▐ñ╢ñ▐ñ╩┤╞║║Ñ∞Ñ│í╝Ñ╔ñ≥╜±ñ¡╣■ñαñ┐ñßñ╦╔¼═╫ñ╟ñ╣íú

compat

╩╤┤╣Ñ┴ÑπÑ═Ñδñ╬└⌐╕┬ñ╬ñ▀ñ╦┬╨ñ╖ñ╞└▀ñ▒ñΘñ∞ñ┐╞├─Ωñ╬└⌐╕┬ñ≥╠╡╕·ñ╦ñ╖ñ▐ñ╣íú

core

╞├╕óíósetuidíósetgid ñ╬ñññ║ñ∞ñ½ñ╟ñóñδÑ╫ÑφÑ╗Ñ╣ñ╬Ñ│ÑóÑñÑßí╝Ñ╕ñ≥Ñ└Ñ≤Ñ╫ñ╣ñδñ┐ñßñ╦╔¼═╫ñ╟ñ╣íúñ│ñ╬╞├╕óñ╧íó╛σ╡¡ñ╬╛≥╖∩ñ╦│║┼÷ñ╖ñ╩ññÑ╫ÑφÑ╗Ñ╣ñ╬Ñ│ÑóÑñÑßí╝Ñ╕ñ≥Ñ└Ñ≤Ñ╫ñ╣ñδ╛∞╣τñ╧╔¼═╫ñóñΩñ▐ñ╗ñ≤íú

dacread

╟ñ░╒ÑóÑ»Ñ╗Ñ╣Ñ│Ñ≤Ñ╚Ñφí╝Ñδ (DAC) └⌐╕┬ñ≥╠╡╕·ñ╦ñ╖ñ▐ñ╣ñ¼íóѬÑ╓Ñ╕ѺѻÑ╚ñ≥╩╤╣╣ñ╖ñ╩ññѬÑ┌Ñ∞í╝Ñ╖ÑτÑ≤(╞╔ñ▀╝ΦñΩñ¬ñΦñ╙╝┬╣╘Ñ╤í╝Ñ▀Ñ├Ñ╖ÑτÑ≤)ñ╦╕┬ñΘñ∞ñ▐ñ╣íúí╓ÑóÑ»Ñ╗Ñ╣Ñ╤í╝Ñ▀Ñ├Ñ╖ÑτÑ≤í╫ñ≥╗▓╛╚ñ╖ñ╞ñ»ñ└ñ╡ññíú

dacwrite

╟ñ░╒ÑóÑ»Ñ╗Ñ╣Ñ│Ñ≤Ñ╚Ñφí╝Ñδ└⌐╕┬ñ≥╠╡╕·ñ╦ñ╖ñ▐ñ╣ñ¼íóѬÑ╓Ñ╕ѺѻÑ╚ñ≥╩╤╣╣ñ╣ñδѬÑ┌Ñ∞í╝Ñ╖ÑτÑ≤(╜±ñ¡╣■ñ▀Ñ╤í╝Ñ▀Ñ├Ñ╖ÑτÑ≤)ñ╦╕┬ñΘñ∞ñ▐ñ╣íúí╓ÑóÑ»Ñ╗Ñ╣Ñ╤í╝Ñ▀Ñ├Ñ╖ÑτÑ≤í╫ñ≥╗▓╛╚ñ╖ñ╞ñ»ñ└ñ╡ññíú

dev

Ñ╫ÑΘÑñÑ┘í╝Ñ╚╛⌡┬╓ñ╦ñóñδÑ╟Ñ╨ÑñÑ╣Ñ∞Ñ┘Ñδñ╟íóÑ╟Ñ╨ÑñÑ╣Ñ╗Ñ¡ÑσÑΩÑ╞Ñú┬░└¡ñ≥└▀─Ωñ▐ñ┐ñ╧╝Φ╞└ñ╖íóÑ╫ÑΘÑñÑ┘í╝Ñ╚╛⌡┬╓ñ╦ñóñδÑ╟Ñ╨ÑñÑ╣ñ╦ÑóÑ»Ñ╗Ñ╣ñ╣ñδñ┐ñßñ╦╔¼═╫ñ╟ñ╣íúñ│ñ╬╞├╕óñ╧íóѪÑúÑ≤Ñ╔Ѫ┤╔═²ñ╬╞├╝∞ñ╩ ioctl ñ╚íó┐«═Ω└¡ñ╬ñóñδÑ╜Ñ╒Ñ╚ѪѺÑóñ≥Ñ┐í╝Ñ▀Ñ╩ÑδÑ╔ÑΘÑñÑ╨ñ╦Ñ└ѪÑ≤Ñφí╝Ñ╔ñ╣ñδñ┐ñßñ╦ñΓ╗╚═╤ñ╡ñ∞ñ▐ñ╣íú

driver

Ñ╡í╝Ñ╔Ñ╤í╝Ñ╞ÑúÑ┘Ñ≤Ñ└ñ¼│½╚»ñ╖ñ┐Ñ╟Ñ╨ÑñÑ╣Ñ╔ÑΘÑñÑ╨ñ╚ñ╬╕▀┤╣└¡ñ╬ñ┐ñßñ╬ñΓñ╬ñ╟ñ╣íúñ│ñ∞ñ╧íó╞├╕ó╔╒ñ¡Ñ╫ÑφÑ╗Ñ╣ñ╪ñ╬└⌐╕┬ñ¼╔¼═╫ñ╩Ñ╗Ñ≤Ñ╖Ñ╞ÑúÑ╓ñ╩ѬÑ┌Ñ∞í╝Ñ╖ÑτÑ≤ñ╦╗╚═╤ñ╡ñ∞ñ▐ñ╣íú

filesys

Ñ╒ÑíÑñÑδÑ╖Ñ╣Ñ╞Ñαñ╟ñ╬íó╚µ│╙┼¬Ñ╗Ñ≤Ñ╖Ñ╞ÑúÑ╓ñ╟ñ╩ññ╞├╕ó╔╒ñ¡Ñ¬Ñ┌Ñ∞í╝Ñ╖ÑτÑ≤(Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╪ñ╬ÑΩÑ≤Ñ»ñ╬║ε└«íó═¡╕·ñ╩Ñδí╝Ñ╚Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╬└▀─Ωíó╞├╝∞Ñ╒ÑíÑñÑδñ╬║ε└«)ñ╦╔¼═╫ñ╟ñ╣íú

fsysrange

Ñ╒ÑíÑñÑδÑ╖Ñ╣Ñ╞Ñαñ╬╚╧░╧└⌐╕┬ñ≥╠╡╕·ñ╦ñ╖ñ▐ñ╣íú

loadmod

Ñφí╝Ñ╔▓─╟╜ÑΓÑ╕Ñσí╝Ñδñ╦┬╨▒■ñ╣ñδ┴¬┬≥ѬÑ┌Ñ∞í╝Ñ╖ÑτÑ≤ñ╬╝┬╣╘ñ╦╔¼═╫ñ╟ñ╣íú

macread

╢»└⌐ÑóÑ»Ñ╗Ñ╣Ñ│Ñ≤Ñ╚Ñφí╝Ñδ(MAC)└⌐╕┬ñ≥╠╡╕·ñ╦ñ╖ñ▐ñ╣ñ¼íóѬÑ╓Ñ╕ѺѻÑ╚ñ≥╩╤╣╣ñ╖ñ╩ññѬÑ┌Ñ∞í╝Ñ╖ÑτÑ≤ñ╦╕┬ñΘñ∞ñ▐ñ╣íúí╓ÑóÑ»Ñ╗Ñ╣Ñ╤í╝Ñ▀Ñ├Ñ╖ÑτÑ≤í╫ñ≥╗▓╛╚ñ╖ñ╞ñ»ñ└ñ╡ññíú

macwrite

ѬÑ╓Ñ╕ѺѻÑ╚ñ╬╩╤╣╣ñ▐ñ┐ñ╧╩╠ñ╬ MAC ┤╪╧óñ╬┬░└¡ñ≥┤▐ñα╢»└⌐ÑóÑ»Ñ╗Ñ╣Ñ│Ñ≤Ñ╚Ñφí╝Ñδ(MAC)└⌐╕┬ñ≥╠╡╕·ñ╦ñ╖ñ▐ñ╣íúí╓ÑóÑ»Ñ╗Ñ╣Ñ╤í╝Ñ▀Ñ├Ñ╖ÑτÑ≤í╫ñ≥╗▓╛╚ñ╖ñ╞ñ»ñ└ñ╡ññíú

macupgrade

Ñ╒ÑíÑñÑδñ╬ÑóÑ├Ñ╫Ñ░Ñ∞í╝Ñ╔(┤√┬╕ñ╬Ñ∞Ñ┘Ñδñ½ñΘ┐╖ñ╖ññ═Ñ└¬ñ╩Ñ∞Ñ┘Ñδñ╪ñ╬╩╤╣╣)╜Φ═²ñ≥╡÷▓─ñ╖ñ▐ñ╣íú

mount

Ñ╒ÑíÑñÑδÑ╖Ñ╣Ñ╞Ñαñ╬Ñ▐ѪÑ≤Ñ╚/ÑóÑ≤Ñ▐ѪÑ≤Ñ╚ñ≥╣╘ñªñ½íóÑ╒ÑíÑñÑδÑ╖Ñ╣Ñ╞Ñαñ╬╛σ╕┬Ñ∞Ñ┘Ñδñ╬└▀─Ωñ¬ñΦñ╙╝Φ╞└ñ≥╣╘ñññ▐ñ╣íú

multidir

Ñ▐ÑδÑ┴Ñ∞Ñ┘ÑδÑ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╬║ε└«ñ╦╔¼═╫ñ╟ñ╣íú

owner

╕╞ñ╙╜╨ñ╖┬ªÑ╫ÑφÑ╗Ñ╣ñ╬═¡╕·ñ╩ uid ñ╦╜Ω═¡ñ╡ñ∞ñ╞ñññ╩ññÑ╒ÑíÑñÑδñ╬┬░└¡ (Ñ╒ÑíÑñÑδñ╬ i Ñ╬í╝Ñ╔ñ╦╩▌╗²ñ╡ñ∞ñ╞ñññδ╛≡╩≤) ╩╤╣╣ñ╦╔¼═╫ñ╟ñ╣íúí╓ÑóÑ»Ñ╗Ñ╣Ñ╤í╝Ñ▀Ñ├Ñ╖ÑτÑ≤í╫ñ≥╗▓╛╚ñ╖ñ╞ñ»ñ└ñ╡ññíú

plock

ÑßÑΓÑΩñ╬Ñ╫ÑφÑ╗Ñ╣ñ≥ÑφÑ├Ñ»ñ╣ñδñ┐ñßñ╦╔¼═╫ñ╟ñ╣íú

rtime

ÑΩÑóÑδÑ┐ÑñÑαѬÑ┌Ñ∞í╝Ñ╖ÑτÑ≤ñ≥╣╘ñªÑ╫ÑφÑ╗Ñ╣ñ╦╔¼═╫ñ╟ñ╣íú

setflevel

└⌐╕┬ñ≥▓├ñ¿ñδñ┐ñßñ╦íóѬÑ╓Ñ╕ѺѻÑ╚ñ╬Ñ╗Ñ¡ÑσÑΩÑ╞ÑúÑ∞Ñ┘Ñδñ≥╩╤╣╣ñ╣ñδ╛∞╣τñ╦╔¼═╫ñ╟ñ╣(Ñ╤Ñ╓ÑΩÑ├Ñ»╛⌡┬╓ñ╬ñ▀ñ╬Ñ╓ÑφÑ├Ñ»╖┐ñ▐ñ┐ñ╧Ñ¡ÑπÑΘÑ»Ñ┐╖┐╞├╝∞Ñ╒ÑíÑñÑδ)íú

setplevel

└⌐╕┬ñ≥▓├ñ¿ñδñ┐ñßñ╦íóÑ╫ÑφÑ╗Ñ╣ñ╬Ñ╗Ñ¡ÑσÑΩÑ╞ÑúÑ∞Ñ┘Ñδñ≥╩╤╣╣ñ╣ñδ╛∞╣τñ╦╔¼═╫ñ╟ñ╣(Ñ╫ÑφÑ╗Ñ╣╞╚╝½ñ╬Ñ∞Ñ┘Ñδñ≥┤▐ñα)íú

setspriv

Ñ╒ÑíÑñÑδñ╦╖╤╛╡▓─╟╜ñ╩╞├╕óñ╚╕╟─Ω╞├╕óñ≥└▀─Ωñ╣ñδñ┐ñßñ╦╔¼═╫ñ╩┤╔═²╞├╕óíúñ│ñ╬╞├╕óñ╧íóÑóÑ»Ñ╗Ñ╣ñ¬ñΦñ╙╜Ω═¡ñ╬└⌐╕┬ñ≥╠╡╕·ñ╦ñ╖ñ▐ñ╣íú

setuid

Ñ╫ÑφÑ╗Ñ╣ñ╬╝┬/═¡╕·Ñµí╝Ñ╢ ID ñ¬ñΦñ╙Ñ░Ñδí╝Ñ╫ ID ñ≥└▀─Ωñ╣ñδñ┐ñßñ╦╔¼═╫ñ╟ñ╣íú

setupriv

┬╛ñ╬╛∞╣τñ╧╞├╕óñ╬ñ╩ññÑ╫ÑφÑ╗Ñ╣ñ╦┬╨ñ╖íó╖╤╛╡▓─╟╜ñ╩╕╟─Ω╞├╕óñ≥Ñ╒ÑíÑñÑδñ╦└▀─Ωñ╣ñδñ┐ñßñ╦╔¼═╫ñ╩╞├╕óíúñ│ñ╬╞├╕óñ╧íóÑóÑ»Ñ╗Ñ╣ñ▐ñ┐ñ╧╜Ω═¡╕ó└⌐╕┬ñ≥╠╡╕·ñ╦ñ╖ñ▐ñ╗ñ≤íú

sysops

Ñ▐ÑñÑ╩í╝Ñ╗Ñ¡ÑσÑΩÑ╞Ñúñ╬ñ▀ñ≥┤▐ñα░∞╚╠Ñ╖Ñ╣Ñ╞ÑαѬÑ┌Ñ∞í╝Ñ╖ÑτÑ≤ñ≥╝┬╣╘ñ╣ñδñ┐ñßñ╦╔¼═╫ñ╟ñ╣íú

tshar

Ñ┐ÑñÑαÑ╖ѺÑóÑΩÑ≤Ñ░Ñ╫ÑφÑ╗Ñ╣ñ╬═Ñ└Φ╜τñ≥╛σñ▓ñδñ½íóѵí╝Ñ╢ñ╬═Ñ└Φ╜τ░╠└⌐╕┬ñ≥ 0 ñΦñΩ┬τñ¡ññ├═ñ╦░·ñ¡╛σñ▓ñδñ┐ñßñ╦╔¼═╫ñ╟ñ╣íú

ÑóÑ»Ñ╗Ñ╣Ñ╤í╝Ñ▀Ñ├Ñ╖ÑτÑ≤

ÑΓí╝Ñ╔Ñ╙Ñ├Ñ╚ñ╧╟ñ░╒ÑóÑ»Ñ╗Ñ╣Ñ│Ñ≤Ñ╚Ñφí╝Ñδ(DAC)ñ╚╕╞ñ╨ñ∞ñ▐ñ╣íú╢»└⌐ÑóÑ»Ñ╗Ñ╣Ñ│Ñ≤Ñ╚Ñφí╝Ñδ(MAC)╞├╕óñ¼─Ω╡┴ñ╡ñ∞ñ▐ñ╣ñ¼íó╗╚═╤ñ╖ñ╞ñññδÑ╖Ñ╣Ñ╞Ñαñ╟ñ╧Ñ╡Ñ▌í╝Ñ╚ñ╡ñ∞ñ╩ññ╛∞╣τñ¼ñóñΩñ▐ñ╣íú

╔╕╜αñ╬Ñ╒ÑíÑñÑδÑóÑ»Ñ╗Ñ╣Ñ╤í╝Ñ▀Ñ├Ñ╖ÑτÑ≤Ñ╙Ñ├Ñ╚ñ≥╝┬╣╘ñ╣ñδñ╚íóѬÑ╓Ñ╕ѺѻÑ╚ñ╦ÑóÑ»Ñ╗Ñ╣ñ≥═╫╡ßñ╣ñδÑ╫ÑφÑ╗Ñ╣ñ╦íó═╫╡ßñ╡ñ∞ñ┐╩²╦í(╞╔ñ▀╝ΦñΩíó╜±ñ¡╣■ñ▀íó╝┬╣╘/╕í║≈ñ╩ñ╔)ñ╟ÑóÑ»Ñ╗Ñ╣ñ╣ñδñ┐ñßñ╬Ñ╤í╝Ñ▀Ñ├Ñ╖ÑτÑ≤ñ¼ñóñδñ½ñ╔ñªñ½ñ≥╚╜├╟ñ╖ñ▐ñ╣íú═╫╡ßñ╡ñ∞ñ┐│╞ÑóÑ»Ñ╗Ñ╣ÑΓí╝Ñ╔ñ╧íó╝íñ╬ñΦñªñ╩ÑóÑδÑ┤ÑΩÑ║Ñαñ╟╩╠í╣ñ╦Ñ┴ѺÑ├Ñ»ñ╡ñ∞ñ▐ñ╣íú

1. Ñ╫ÑφÑ╗Ñ╣ñ╬═¡╕·ñ╩ѵí╝Ñ╢ ID ñ¼Ñ╒ÑíÑñÑδ╜Ω═¡╝╘ñ╬ѵí╝Ñ╢ ID ñ╚┼∙ñ╖ñ»íó═╫╡ßñ╡ñ∞ñ┐ÑóÑ»Ñ╗Ñ╣ÑΓí╝Ñ╔Ñ╙Ñ├Ñ╚ñ¼ÑΓí╝Ñ╔ñ╬í╓╜Ω═¡╝╘í╫Ñ╙Ñ├Ñ╚ñ╟└▀─Ωñ╡ñ∞ñ╞ñññδ╛∞╣τíóÑóÑ»Ñ╗Ñ╣ñ╧╡÷▓─ñ╡ñ∞ñ▐ñ╣íúñ╜ñ∞░╩│░ñ╬╛∞╣τíóÑóÑ»Ñ╗Ñ╣Ñ┴ѺÑ├Ñ»ñ¼╖╤┬│ñ╡ñ∞ñ▐ñ╣íú

2. ═¡╕·ñ╩ѵí╝Ñ╢ ID (ñ▐ñ┐ñ╧Ñ╫ÑφÑ╗Ñ╣ñ╬╟ñ░╒ñ╬╩Σ┤░Ñ░Ñδí╝Ñ╫ ID) ñ¼Ñ╒ÑíÑñÑδñ╬╜Ω═¡Ñ░Ñδí╝Ñ╫ñ╚░∞├╫ñ╖íó═╫╡ßñ╡ñ∞ñ┐ÑóÑ»Ñ╗Ñ╣ÑΓí╝Ñ╔Ñ╙Ñ├Ñ╚ñ¼ÑΓí╝Ñ╔ñ╬í╓Ñ░Ñδí╝Ñ╫í╫Ñ╙Ñ├Ñ╚ñ╦└▀─Ωñ╡ñ∞ñ╞ñññδ╛∞╣τíóÑóÑ»Ñ╗Ñ╣ñ╧╡÷▓─ñ╡ñ∞ñ▐ñ╣íúñ╜ñ∞░╩│░ñ╬╛∞╣τíóÑóÑ»Ñ╗Ñ╣Ñ┴ѺÑ├Ñ»ñ¼╖╤┬│ñ╡ñ∞ñ▐ñ╣íú

3. ╛σ╡¡ñ╬Ñ┴ѺÑ├Ñ»ñ¼╔╘╣τ│╩ñ╦ñ╩ñΩíó═╫╡ßñ╡ñ∞ñ┐ÑóÑ»Ñ╗Ñ╣ÑΓí╝Ñ╔Ñ╙Ñ├Ñ╚ñ¼ÑΓí╝Ñ╔ñ╬í╓ñ╜ñ╬┬╛í╫Ñ╙Ñ├Ñ╚ñ╦└▀─Ωñ╡ñ∞ñ╞ñññδ╛∞╣τíóÑóÑ»Ñ╗Ñ╣ñ╧╡÷▓─ñ╡ñ∞ñ▐ñ╣íúñ╜ñ∞░╩│░ñ╬╛∞╣τíóÑóÑ»Ñ╗Ñ╣ñ╧╡±╚▌ñ╡ñ∞ñ▐ñ╣(EACCES ñ¼╠ßñΩñ▐ñ╣)íú

4. ñ│ñ∞ñΘñ╬Ñ┴ѺÑ├Ñ»ñ╧íóѬÑ╓Ñ╕ѺѻÑ╚╝½┬╬ñΓ┤▐ñßñ╞íóÑ╤Ñ╣╠╛ñ╬│╞Ñ│Ñ≤Ñ▌í╝Ñ═Ñ≤Ñ╚ñ╟╝┬╣╘ñ╡ñ∞ñ▐ñ╣íúñ│ñ∞ñΘñ╬Ñ┴ѺÑ├Ñ»ñ╬ñññ║ñ∞ñ½ñ¼╔╘╣τ│╩ñ╦ñ╩ñδñ╚íó╕╞ñ╙╜╨ñ╖Ñ╫ÑφÑ╗Ñ╣ñ╬╞├╕óñ¼─┤ñ┘ñΘñ∞íó╕╞ñ╙╜╨ñ╖Ñ╫ÑφÑ╗Ñ╣ñ╦íó═╫╡ßñ╡ñ∞ñ┐ÑΓí╝Ñ╔ñ╦┬╨ñ╖ñ╞┼¼└┌ñ╩╞├╕óñ¼ñóñδñ½ñ╔ñªñ½ñ¼╚╜├╟ñ╡ñ∞ñ▐ñ╣(╞╔ñ▀╝ΦñΩñ¬ñΦñ╙╝┬╣╘/╕í║≈ÑóÑ»Ñ╗Ñ╣ñ╦ñ╧ dacreadíó╜±ñ¡╣■ñ▀ÑóÑ»Ñ╗Ñ╣ñ╦ñ╧ dacwrite)íú

 
   priv +owner +audit -dacread work 

Ñ╒ÑíÑñÑδ╞├╕óñ≥└▀─Ωñ▐ñ┐ñ╧║∩╜ⁿñ╣ñδñ╚ñ¡ñ╦ñ╧íófilepriv ñ╦ P_SETSPRIV ñ¬ñΦñ╙ P_SETUPRIV ╞├╕óñ¼ñ╩ñ▒ñ∞ñ╨ñ╩ñΩñ▐ñ╗ñ≤íúñ│ñ╬ 2 ñ─ñ╬╞├╕óñ¼ñ╩ññ╛∞╣τíó╡÷▓─ñ╧╡±╚▌ñ╡ñ∞ñ▐ñ╣íú

░·ñ¡┐⌠ priv ñ╧Ñ╫ÑφÑ╗Ñ╣╞├╕ó╠╛ñ╚ñ╖ñ╞─Ω╡┴ñ╡ñ∞ñ▐ñ╣(Intro(2) ╗▓╛╚)íú░·ñ¡┐⌠ allprivs ñ≥╗╚═╤ñ╣ñδñ╚íó╗╚═╤▓─╟╜ñ╩Ñ╫ÑφÑ╗Ñ╣╞├╕óñ≥ñ╣ñ┘ñ╞└▀─Ωñ▐ñ┐ñ╧║∩╜ⁿñ╟ñ¡ñ▐ñ╣íúÑ╒ÑíÑñÑδ╞├╕óñ≥└▀─Ωñ▐ñ┐ñ╧║∩╜ⁿñ╣ñδñ╚ñ¡ñ╦ñ╧íófile ░·ñ¡┐⌠ñ≥╝┬╣╘▓─╟╜Ñ╒ÑíÑñÑδñ╬└Σ┬╨Ñ╤Ñ╣╠╛ñ╦ñ╖ñ╩ñ▒ñ∞ñ╨ñ╩ñΩñ▐ñ╗ñ≤íúñ▐ñ┐íófile ░·ñ¡┐⌠ñ≥╛»ñ╩ñ»ñ╚ñΓ 1 ñ─╗╪─Ωñ╖ñ╩ñ▒ñ∞ñ╨ñ╩ñΩñ▐ñ╗ñ≤íúfile ░·ñ¡┐⌠ñ≥╗╪─Ωñ╖ñ╩ññ╛∞╣τíó filepriv ñ╧Ñ¿ÑΘí╝ñ≥╩╓ñ╖ñ╞╜¬╬╗ñ╖ñ▐ñ╣íú

filepriv ñ╧íórealpath Ñδí╝Ñ┴Ñ≤ñ≥╕╞ñ╙╜╨ñ╖ñ╞Ñ╖Ñ≤Ñ▄ÑΩÑ├Ñ»ÑΩÑ≤Ñ»ñ≥▓≥╖Φñ╖ñ▐ñ╣íúñ│ñ╬╩²╦íñ╟ñ╧íóñ╣ñ╟ñ╦ PDF ╞Γñ╦┬╕║▀ñ╣ñδÑ╒ÑíÑñÑδ╛σñ╬Ñ╖Ñ≤Ñ▄ÑΩÑ├Ñ»ÑΩÑ≤Ñ»ñ╦┤╪ñ╖ñ╞╞├╕óÑ╟í╝Ñ┐Ñ╒ÑíÑñÑδñ╦┐╖ñ╖ññ╞├╕óñ≥╞■╬╧ñ╣ñδñ╚íóñ╜ñ╬╞├╕óñ╧└╡ñ╖ñ»┬╨▒■╔╒ñ▒ñ╡ñ∞ñ▐ñ╣íú

Ñ╒ÑíÑñÑδ╞├╕óñ≥└▀─Ωñ╣ñδ╛∞╣τíó-f ñ¬ñΦñ╙ -i ѬÑ╫Ñ╖ÑτÑ≤ñ╟╗╪─Ωñ╖ñ┐╞├╕óñ¼┼¼═╤ñ╡ñ∞ñδ┴░ñ╦íó╗╪─Ωñ╖ñ┐Ñ╒ÑíÑñÑδ╛σñ╬╕╟─Ω╖╤╛╡╞├╕óñ¼ñ╣ñ┘ñ╞║∩╜ⁿñ╡ñ∞ñ▐ñ╣íúñ▐ñ┐íófilepriv ñ╧íó╞├╕óÑ╟í╝Ñ┐Ñ╒ÑíÑñÑδñ╟─Ω╡┴ñ╡ñ∞ñ┐ filepriv(2) ñ≥╕╞ñ╙╜╨ñ╣Ñ╫ÑφÑ╗Ñ╣╛σñ╬║╟┬τ╞├╕ó└▀─Ωñ╟╡÷▓─ñ╡ñ∞ñδ╞├╕óñ╬ñ▀ñ≥└▀─Ωñ╖ñ▐ñ╣íú

-f ñ¬ñΦñ╙ -i ѬÑ╫Ñ╖ÑτÑ≤ñ≥╗╪─Ωñ╖ñ┐╛∞╣τíó╬╛╩²ñ╦╞▒ñ╕╞├╕óñ¼┬╕║▀ñ╣ñδñ╚íófilepriv Ñ│Ñ▐Ñ≤Ñ╔ñ╧Ñ¿ÑΘí╝ñ≥╩╓ñ╖ñ╞╜¬╬╗ñ╖ñ▐ñ╣íú

Ñ╒ÑíÑñÑδñ½ñΘ╞├╕ó╛≡╩≤ñ≥║∩╜ⁿñ╣ñδ╛∞╣τñ╧ -d ѬÑ╫Ñ╖ÑτÑ≤ñ≥╗╚═╤ñ╖ñ▐ñ╣íúñ┐ñ└ñ╖íó-d ѬÑ╫Ñ╖ÑτÑ≤ñ╧íó┬╕║▀ñ╖ñ╩ññÑ╒ÑíÑñÑδñ≥╞├╕óÑ╟í╝Ñ┐Ñ┘í╝Ñ╣ñ½ñΘ║∩╜ⁿñ╣ñδñ┐ñßñ╦ñΓ╗╚═╤ñ╖ñ▐ñ╣íúÑ╒ÑíÑñÑδñ¼┬╕║▀ñ╣ñδ╛∞╣τíó-d ѬÑ╫Ñ╖ÑτÑ≤ñ╧╞├╕óñ≥║∩╜ⁿñ╖ñ▐ñ╣íúÑ╒ÑíÑñÑδñ¼ñ╦ñ╗ñ╬Ñ╒ÑíÑñÑδ(spurious file)ñ╟ñóñδñ┐ñßñ╦┬╕║▀ñ╖ñ╩ññ╛∞╣τíóñ▐ñ┐ñ╧╞├╕ó┤╔═²╝╘ñ¼├╬ñΘñ╩ñññªñ┴ñ╦Ñ╖Ñ╣Ñ╞Ñαñ½ñΘ║∩╜ⁿñ╡ñ∞ñ┐ñ┐ñßñ╦┬╕║▀ñ╖ñ╞ñññ╩ññ╛∞╣τíó-d ѬÑ╫Ñ╖ÑτÑ≤ñ╧ñ│ñ╬Ñ╒ÑíÑñÑδñ≥╞├╕óÑ╟í╝Ñ┐Ñ┘í╝Ñ╣ñ½ñΘ║∩╜ⁿñ╖ñ▐ñ╣íú

ѬÑ╫Ñ╖ÑτÑ≤ñ≥╗╪─Ωñ╖ñ╩ñññ╚íófilepriv ñ╧╗╪─Ωñ╡ñ∞ñ┐Ñ╒ÑíÑñÑδñ╦┬╨▒■ñ╣ñδ╞├╕óñ≥╔╜╝¿ñ╖ñ▐ñ╣íú

╛╩╬¼├═

╗╚═╤╬π

 
   fixed     priv,priv, . . . 
   inher     priv,priv, . . . 

╩ú┐⌠ñ╬Ñ╒ÑíÑñÑδñ≥╗╪─Ωñ╣ñδ╛∞╣τñ╧íó▓╝╡¡ñ╬ñ╚ñ¬ñΩ╞├╕óñ╬┴░ñ╦Ñ╒ÑíÑñÑδ╠╛íóÑ│ÑφÑ≤ (``:'') 1 ╕─íóñ¬ñΦñ╙╢⌡╟≥╩╕╗·ñ╬╜τ╜°ñ╟Ñ╫ÑΩÑ≤Ñ╚ñ╡ñ∞ñ▐ñ╣íú

 
   file1: fixed     priv,priv, . . . 
   file1: inher     priv,priv, . . . 
   file2: fixed     priv,priv, . . . 
   file2: inher     priv,priv, . . . 
   file3: fixed     priv,priv, . . . 
   file3: inher     priv,priv, . . . 

Ñ╒ÑíÑñÑδ

/etc/security/tcb/privs

╞├╕óÑ╟í╝Ñ┐Ñ╒ÑíÑñÑδ

/etc/default/privcmds

╛╩╬¼╗■ñ╬Ñ╒ÑíÑñÑδ

┐╟├╟

filepriv ñ¼Ñ¿ÑΘí╝ñ≥╕í╜╨ñ╣ñδñ╚íó▓╝╡¡ñ╬ÑßÑ├Ñ╗í╝Ñ╕ñ¼╔╜╝¿ñ╡ñ∞ñδ╛∞╣τñ¼ñóñΩñ▐ñ╣íú

• undefined process privilege priv

• cannot use priv as both fixed and inheritable privilege

• cannot access file file

• file is not an executable file

• permission denied

• file is not an absolute pathname

• incompatible options specified

• no such file or directory for file file

• filepriv system call not in operation

• Bad entry found in /etc/security/tcb/privs

• the file file was not found in the privilege data file

• cannot create lock for /etc/security/tcb/privs

┤╪╧ó╣α╠▄