Next, add the privilege attributes you want assigned to the file.

Refer to setfilexsec(1M) for more information about troubleshooting fine-grained privileges.

Problem 2: A process has privileges it should not have, or does not have privileges it should

have. Solution: Run the following command to determine what privileges a process has:

#getprocxsec [options] [pid]

The following options are available with the getprocxsec command:

-pDisplays permitted privileges for the process. -eDisplays effective privileges for the process. -rDisplays retained privileges for the process.

pid The process ID of the process for which privileges are displayed.

If the process does not have the correct privileges, configure the binary file that created this process with the correct privileges. Refer to “Configuring Applications with Fine-Grained Privileges” for more information.

56 Fine-Grained Privileges

Page 56
Image 56
HP UX 11i Role-based Access Control (RBAC) Software manual # getprocxsec options pid