Red Hat ENTERPRISE LINUX 3 - DEVELOPER TOOLS GUIDE Spécifications télécharger pdf (Page 103)

Red Hat Enterprise Linux to Oracle Solaris Porting Guide

102

TABLE A-1. ORACLE SOLARIS 11 SECURITY PRIVILEGES

PRIVILEGE NAME DESCRIPTION

PRIV_PROC_CHROOT Allow a process to change its root directory.

PRIV_PROC_CLOCK_HIGHRES

Allow a process to use high-resolution timers.

PRIV_PROC_EXEC Allow a process to call exec(2).

PRIV_PROC_FORK Allow a process to call fork(2), fork1(2), or vfork(2).

PRIV_PROC_INFO Allow a process to examine the status of processes other than

those to which it can send signals. Processes that cannot be

examined cannot be seen in /proc and appear not to exist.

PRIV_PROC_LOCK_MEMORY

Allow a process to lock pages in physical memory.

PRIV_PROC_OWNER Allow a process to send signals to other processes and inspect and

modify the process state in other processes, regardless of

ownership. When modifying another process, additional restrictions

apply: The effective privilege set of the attaching process must be a

superset of the target process's effective, permitted, and inheritable

sets; the limit set must be a superset of the target's limit set; if the

target process has any UID set to 0, all privileges must be asserted

unless the effective UID is 0. Allow a process to bind arbitrary

processes to CPUs.

PRIV_PROC_PRIOCNTL Allow a process to elevate its priority above its current level. Allow

a process to change its scheduling class to any scheduling class,

including the RT class.

PRIV_PROC_SESSION Allow a process to send signals or trace processes outside its

session.

PRIV_PROC_SETID Allow a process to set its UIDs at will, assuming UID 0 requires all

privileges to be asserted.

PRIV_PROC_TASKID Allow a process to assign a new task ID to the calling process.

PRIV_PROC_ZONE Allow a process to trace or send signals to processes in other

zones. See zones(5)

PRIV_SYS_ACCT Allow a process to enable and disable and manage accounting

through

acct(2)

PRIV_SYS_ADMIN Allow a process to perform system administration tasks such as

setting the node and domain name and specifying coreadm(1M)

and nscd(1M) settings.

1 2 ... 98 99 100 101 102 103 104 105 106 107 108 109 110

Pas de commentaire

Red Hat ENTERPRISE LINUX 3 - DEVELOPER TOOLS GUIDE Spécifications Page 103