diff options
| author | Alex Wilson <alex.wilson@joyent.com> | 2015-09-08 11:52:58 -0700 |
|---|---|---|
| committer | Alex Wilson <alex.wilson@joyent.com> | 2015-09-08 12:22:32 -0700 |
| commit | 26bd3a79a40a1f5bbd290d933c101a992b3a69df (patch) | |
| tree | 8634fc2e99c4a9f93cf4895b31759eb41faac3ec /usr/src/man/man5/privileges.5 | |
| parent | 0cc355c2e6d0f1ceb6efa371505ed4fbf0e7568c (diff) | |
| download | illumos-joyent-26bd3a79a40a1f5bbd290d933c101a992b3a69df.tar.gz | |
OS-4720 manpages about privileges are out of date wrt basicset and new privs in it
Reviewed by: Robert Mustacchi <rm@joyent.com>
Reviewed by: Jerry Jelinek <jerry.jelinek@joyent.com>
Diffstat (limited to 'usr/src/man/man5/privileges.5')
| -rw-r--r-- | usr/src/man/man5/privileges.5 | 15 |
1 files changed, 11 insertions, 4 deletions
diff --git a/usr/src/man/man5/privileges.5 b/usr/src/man/man5/privileges.5 index 260a768e81..4eac17d831 100644 --- a/usr/src/man/man5/privileges.5 +++ b/usr/src/man/man5/privileges.5 @@ -235,7 +235,9 @@ modify that file's or directory's permission bits or ACL. .ad .sp .6 .RS 4n -Allow a process to read objects in the filesystem. +Allow a process to open objects in the filesystem for reading. This +privilege is not necessary to read from an already open file which was opened +before dropping the \fBPRIV_FILE_READ\fR privilege. .RE .sp @@ -275,7 +277,9 @@ Extensions. .ad .sp .6 .RS 4n -Allow a process to modify objects in the filesytem. +Allow a process to open objects in the filesytem for writing, or otherwise +modify them. This privilege is not necessary to write to an already open file +which was opened before dropping the \fBPRIV_FILE_WRITE\fR privilege. .RE .sp @@ -354,7 +358,9 @@ Segment. .ad .sp .6 .RS 4n -Allow a process to open a TCP, UDP, SDP, or SCTP network endpoint. +Allow a process to open a TCP, UDP, SDP, or SCTP network endpoint. This +privilege is not necessary to communicate using an existing endpoint already +opened before dropping the \fBPRIV_NET_ACCESS\fR privilege. .RE .sp @@ -1087,7 +1093,8 @@ x86 platforms. .sp .LP Of the privileges listed above, the privileges \fBPRIV_FILE_LINK_ANY\fR, -\fBPRIV_PROC_INFO\fR, \fBPRIV_PROC_SESSION\fR, \fBPRIV_PROC_FORK\fR and +\fBPRIV_PROC_INFO\fR, \fBPRIV_PROC_SESSION\fR, \fBPRIV_PROC_FORK\fR, +\fBPRIV_FILE_READ\fR, \fBPRIV_FILE_WRITE\fR, \fBPRIV_NET_ACCESS\fR and \fBPRIV_PROC_EXEC\fR are considered "basic" privileges. These are privileges that used to be always available to unprivileged processes. By default, processes still have the basic privileges. |