Select the three activities necessary to accomplish this.

alice is a user account used by Alice on a Solaris 11 system.
sadmin is a role account on the same system.

Your task is to add the command /usr/sbin/cryptoadm to the Network management profile, so that
Alice can execute it, while assuming the sadmin role.
Select the three activities necessary to accomplish this.

alice is a user account used by Alice on a Solaris 11 system.
sadmin is a role account on the same system.

Your task is to add the command /usr/sbin/cryptoadm to the Network management profile, so that
Alice can execute it, while assuming the sadmin role.
Select the three activities necessary to accomplish this.

A.
To the file /etc/security/prof_attr, add the line:
Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0

B.
To the file /etc/security/auth_attr, add the line:
Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0

C.
To the file /etc/security/exec_attr.d/local-entriies, add the line:
Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0

D.
Run the roles alice to ensure that alice may assume the role sadmin.

E.
Run the command profiles sadmin to ensure that the role sadmin includes the network
Management profile.

F.
Run the command profiles alice to ensure that the Alice has permissions to access the Network
management profile.

G.
Run the command profiles �Network management� to ensure that the Network management
profile includes the sadmin role.

Explanation:
C: /etc/security/exec_attr is a local database that specifies
the execution attributes associated with profiles. The
exec_attr file can be used with other sources for execution
profiles, including the exec_attr NIS map and NIS+ table.
A profile is a logical grouping of authorizations and commands that is interpreted by a profile shell to form a
secure execution environment.
Reference: man exec_attr



Leave a Reply 11

Your email address will not be published. Required fields are marked *


johny

johny

correct is C, D, E

Naagesh

Naagesh

if you have any problem to meet naagesh regarding solaris

Head HR Pht

Head HR Pht

who is naagesh ?
Please give me number of him.

Head HR Pht

Head HR Pht

I want to meet Naagesh

Naagesh

Naagesh

naagesh is a great power of pht…………

Head Hr pht

Head Hr pht

oye i am the power of pht..

Armen

Armen

I think should be C,D,F

buckss

buckss

i agree
profiles should be correct, not profiles

buckss

buckss

profiles user, not profiles role

popo

popo

“profiles role” is perfectly fine, and it is what you need here, as the use of “sadmin” is mandatory in the case. so CDE is correct as stated by others.