How would you implement this using the RBAC framework?

The security administrator wishes to create a rights profile which is a superset of another rights
profile. Certain commands in the new rights profile are to be run with different attributes to the
original profile. How would you implement this using the RBAC framework?

The security administrator wishes to create a rights profile which is a superset of another rights
profile. Certain commands in the new rights profile are to be run with different attributes to the
original profile. How would you implement this using the RBAC framework?

A.
Copy the lines in the /etc/exec_attr file for the original rights profile and assign them to the new
rights profile. Modify the attributes as necessary.

B.
Modify the /etc/exec_attr file to use a shell script which checks the rights profile being used and
then executes the commands with the appropriate attributes using the pfexec command.

C.
Assign both rights profiles to the appropriate roles and give a higher priority to the commands
for the new rights profile when different attributes are required.

D.
Use the profiles keyword when defining the new rights profile in the /etc/prof_attr file to import
the original rights profile as part of the new rights profile.



Leave a Reply 0

Your email address will not be published. Required fields are marked *