Skip to main content

Posts

Showing posts from 2017

Setting privileges to an user Solaris 10

Root, root, root, everybody always wants root.  Developers, application administrators, users, they all seem to find a reason to "need" root access.  Since normally these needs are for access to particular files or to perform very specific tasks, only a subset of root's access is actually needed.  File access should be trivial enough, just configure the appropriate permissions or FACLs.  For executable processes, traditionally 'sudo' or 'op' would come to mind.  In Solaris, however, we could instead use RBAC and privileges, which are natively available. Our host details for this are:           HOST:           snorkle         PROMPT:         user@snorkle [0]         OS:             Solaris 10 10/09         USER:           johnc         ROLE:           netrole For a sample setup, we have user 'johnc' from group 'neteng' who is tasked with managing the network interfaces and routes on a system.  He will need access to 'ifconfig&