alice is a user account used by Alice on a Solaris 11 system.
sadmin is a role account on the same system.
Your task is to add the command /usr/sbin/cryptoadm to the Network management profile, so that
Alice can execute it, while assuming the sadmin role.
Select the three activities necessary to accomplish this.
A.
To the file /etc/security/prof_attr, add the line:
Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0
B.
To the file /etc/security/auth_attr, add the line:
Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0
C.
To the file /etc/security/exec_attr.d/local-entriies, add the line:
Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0
D.
Run the roles alice to ensure that alice may assume the role sadmin.
E.
Run the command profiles sadmin to ensure that the role sadmin includes the network
Management profile.
F.
Run the command profiles alice to ensure that the Alice has permissions to access the Network
management profile.
G.
Run the command profiles �Network management� to ensure that the Network management
profile includes the sadmin role.
Explanation:
C: /etc/security/exec_attr is a local database that specifies
the execution attributes associated with profiles. The
exec_attr file can be used with other sources for execution
profiles, including the exec_attr NIS map and NIS+ table.
A profile is a logical grouping of authorizations and commands that is interpreted by a profile shell to form a
secure execution environment.
Reference: man exec_attr
correct is C, D, E
if you have any problem to meet naagesh regarding solaris
who is naagesh ?
Please give me number of him.
I want to meet Naagesh
naagesh is a great power of pht…………
oye i am the power of pht..
I think should be C,D,F
i agree
profiles should be correct, not profiles
profiles user, not profiles role
“profiles role” is perfectly fine, and it is what you need here, as the use of “sadmin” is mandatory in the case. so CDE is correct as stated by others.
C,D,E