DOC HOME SITE MAP MAN PAGES GNU INFO SEARCH PRINT BOOK
 
Trusted facility management

The tfadmin command

The tfadmin command allows administrators and privileged users to execute those commands with which they have been associated via the adminuser or adminrole commands

Administrators must include the following system directories in the shell PATH environment variable; the recommended PATH assignment (for use in a .profile or execution at the shell prompt) is

   PATH=${PATH}:/sbin:/usr/sbin
   export PATH
Notice that the current directory is not in the PATH. Because the current directory may contain untrusted programs or malicious programs with the same name as a system program, we recommend against including the current directory in your PATH. If you do include it, list it last, as follows:
   PATH=${PATH}:/sbin:/usr/sbin::
   export PATH
Including the current directory last reduces the risk of executing an untrusted copy of a system program.

We assume you have logged in using a login that is assigned to the role appropriate for the given task; that is, using a login that's assigned to a role that can execute the commands necessary for the task at hand.


Next topic: Executing commands with privilege
Previous topic: Removing a user from the TFM database

© 2004 The SCO Group, Inc. All rights reserved.
UnixWare 7 Release 7.1.4 - 22 April 2004