swacl.1m (2012 03)

s
swacl(1M) swacl(1M)
permission to create (insert) a new product object into the
depot.
c ontrol Grants permission to modify the ACL using
swacl.
t est Grants permission to perform access checks and to list the ACL.
a ll A wildcard which grants all of the above permissions. It is expanded by
swacl to
crwit.
List Output Format
The output of a list operation is in the following format:
# swacl Object_type Access Control List
#
# For depot|host:[host]:[/directory]
#
# Date: date_stamp
#
# Object Ownership: User= user_name
# Group= group_name
# Realm= host_name
#
# default_realm = host_name
entry_type :[key:]permissions
entry_type :[key:]permissions
entry_type :[key:]permissions
You can save this output into a file, modified it, then use it as input to a
swacl modify operation (see the
-F option above).
Object Ownership
An owner is also associated with every SD object, as defined by the user name, group and hostname. The
owner is the user who created the object. When using
swacl to view an ACL, the owner is printed as a
comment in the header.
Default Realm
An ACL defines a default realm for an object. The realm is currently defined as the name of the host sys-
tem on which the object resides. When using
swacl to view an ACL, the default realm is printed as a
comment in the header.
Keys
Expressions (patterns) are not permitted in keys.
A key is required for user, group and host entry types. A key is optional for
other entry types,
and specifies the hostname to which the entry applies. Only one
other entry type may exist without a
key, and this entry applies to users at the default realm (host) of the ACL.
A hostname in a key is listed in its Internet address format (dot notation) if
swacl cannot resolve the
address using the local lookup mechanism (DNS, NIS, or /etc/hosts). A hostname within an ACL
entry must be resolvable when used with the -D and -M options. Unresolvable hostname values are
accepted in files provided with the -F option.
swfixrealm
The
swfixrealm command updates the hostname information (default_realm) in all registered
depots, in all primary root ACL files under /var/adm/sw/products/ifiles
, and in all host ACL
files under
/var/adm/sw/security.
RETURN VALUE
The
swacl command returns:
0 The software_selections and/or target_selections were successfully displayed or modified.
1 The display/modify operation failed on all target_selections.
2 The modify/modify operation failed on some target_selections.
The swfixrealm command returns:
8 Hewlett-Packard Company − 8 − HP-UX 11i Version 3: March 2012