User Commands                                         profiles(1)

NAME
     profiles - print execution profiles for a user

SYNOPSIS
     profiles [ -l ]  [  user  ... ]

DESCRIPTION
     The profiles command prints on standard output the names  of
     the  execution profiles that have been assigned to you or to
     the optionally-specified user or role name. Profiles  are  a
     bundling  mechanism  used  to  enumerate  the  commands  and
     authorizations needed to peform a specific  function.  Along
     with each listed executable are the process attributes, such
     as the effective user and group IDs, with which the  process
     runs  when  started by a privileged command interpreter. The
     profile  shells  are  pfcsh,  pfksh,  and  pfexec.  See  the
     pfexec(1) man page.

     Multiple profiles can be combined to construct the appropri-
     ate access control. When profiles are assigned, the authori-
     zations are added to the existing set. If the  same  command
     appears  in  multiple  profiles,  the  first  occurrence, as
     determined by the ordering of  the  profiles,  is  used  for
     process-attribute settings. For convenience, a wild card can
     be specified to match all commands.

     When profiles are interpreted, the profile  list  is  loaded
     from user_attr(4).  Matching entries in prof_attr(4) provide
     the   authorizations   list,   and   matching   entries   in
     exec_attr(4) provide the commands list.

OPTIONS
     -l    Lists the commands in each  profile  followed  by  the
           special process attributes such as user and group IDs.

EXAMPLES
     Example 1: Sample output

     The output of the profiles command has the following form:

     example% profiles tester01 tester02
     tester01 : Audit Management, All Commands
     tester02 : Device Management, All Commands
     example%

     Example 2: Using the list option

     example% profiles -l tester01 tester02
     tester01 :
         Audit Management:
           /usr/sbin/audit          euid=root
           /usr/sbin/auditconfig    euid=root    egid=sys

SunOS 5.8           Last change: 10 Sep 1999                    1

User Commands                                         profiles(1)

         All Commands:
           *
     tester02 :
         Device Management:
           /usr/bin/allocate:       euid=root
           /usr/bin/deallocate:     euid=root
         All Commands
           *
     example%

EXIT STATUS
     The following exit values are returned:

     0     Successful completion.

     1     An error occurred.

FILES
     /etc/security/exec_attr

     /etc/security/prof_attr

     /etc/user_attr

ATTRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:

     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Availability                | SUNWcsu                     |
    |_____________________________|_____________________________|

SEE ALSO
     auths(1),    pfexec(1),    roles(1),    getprofattr(3SECDB),
     exec_attr(4), prof_attr(4), user_attr(4), attributes(5)

SunOS 5.8           Last change: 10 Sep 1999                    2