|
|
You can also use filepriv to set privileges on files. Because filepriv removes all privileges currently associated with the file before the privileges specified on the command line are applied, you must specify all privileges for a file during one invocation of filepriv. Finally, you must specify the absolute path of a file when setting privileges.
You must be functioning as root to perform this action.
To set the fixed privileges for a file, perform the following:
The filename must be the full pathname of the file.
Suppose, for example, you want to install a new program /sbin/muzz which always requires privilege to override DAC read restrictions. Therefore, you want to make dacread a fixed privilege.
Using the example of the
muzz
program, to set the required privileges for
the program, enter:
filepriv -f dacread /sbin/muzz