Open System Services Shell and Utilities Reference Manual (G06.29+, H06.08+, J06.03+)

User Commands (s) setfilepriv(1)
NAME
setfilepriv - Sets file privileges for one or more executable files
SYNOPSIS
setfilepriv {-a|-d} privilege_value [{-a|-d} privilege_value]... file ...
setfilepriv -f privilege_file file ...
setfilepriv -s priv ilege_v alue[,privilege_v alue]... file ...
FLAGS
-a Adds the specified privile ge_value to the file privileges of file.
-d Deletes the specified privilege_value from the file privileges of file.
-f Sets the privileges for the specified file using the privileges entries contained in
the file privilege_file.
-s Sets the file privileges of file to privilege_value, replacing all existing file
privileges. Multiple privilege values can be separated by commas. Spaces
between values or after commas are not permitted.
Operands
file The pathname of a file for which you want to set privileges.
See DESCRIPTION for information about the requirements for these flags.
DESCRIPTION
The setfilepriv command sets file privileges for the specified file or files. A file specified by file
can be either a Guardian disk file or an OSS regular file, but file privileges are ignored for files
that are not executable files, ordinary DLLs, or user libraries.
The values for privilege_value are:
PRIVNONE If a file has the PRIVNONE file privilege only, the file has no special privileges.
When used with the -s flag:
• If PRIVNONE is used alone, the file privileges are reset and the file has
no special privileges.
• If PRIVNONE is used with another file privilege, such as PRIVSETID,
the PRIVNONE privilege value has no effect and the file privileges are
set to the other file privilge value or values you used.
When used with a flag other than the -s flag, the PRIVNONE privilege value has
no effect.
PRIVSETID If the super ID (255,255 in the Guardian environment, 65535 in the OSS environ-
ment) runs an executable file that has this file privilege, the resultant process is
permitted to perform a privileged switch (such as by using the setuid() function)
to another user ID, group ID, or both to access files in a restricted-access fileset.
PRIVSOARFOPEN
If a locally-authenticated member of the Safeguard
SECURITY_OSS_ADMINISTRATOR (SOA) group runs an executable file that
has this file privilege, the resultant process is permitted to perform additional
system calls needed to back up and restore files in a restricted-access fileset.
These system calls include open(), open64(), creat(), creat64(), link( ),
remove_oss(), unlink( ), rmdir(), and utime(),
527188-021 Hewlett-Packard Company 8−15