![](/images/new-backgrounds/1330589/330589101x1.webp)
4 Fine-Grained Privileges
This chapter describes the
•“Overview”
•
•“Available Privileges”
•“Configuring Applications with
•“Security Implications of
•
•“Troubleshooting
Overview
The UNIX operating system traditionally uses an "all or nothing" privilege model, in which superusers (those with effective UID=0, such as the root user) have virtually unlimited power, and other users have few or no special privileges.
These legacy methods are replaced by the security containment model, including the use of
The
Refer to privileges(5) for more information.
Fine-Grained Privileges Components
The
Commands
Table
Table 4-1 Fine-Grained Privileges Commands
Commands | Description |
setfilexsec | Sets various security attributes of binary files. The attributes currently include |
| retained privileges, permitted privileges, compartment, and privilege |
| awareness flag. |
getfilexsec | Displays security attributes associated with binary executable files. The |
| attributes include retained privileges, permitted privileges, compartment, |
| and privilege awareness flag. |
getprocxsec | Displays security attributes of processes. The attributes currently include |
| effective privileges, retained privileges, permitted privileges, and |
| compartment. |
Overview 51