DOC HOME SITE MAP MAN PAGES GNU INFO SEARCH PRINT BOOK
 
Trusted facility management

Removing commands and privileges for a role

Use adminrole with the -r option to remove commands and privileges from a role.

To remove commands and privileges from a role, perform the following:

  1. Enter

    adminrole -r command_name1:priv,priv role_name

    The command_name is the name of a command defined for that role.

``Removing a privilege from a command for a role'' shows how to remove the mount privilege from the mount command for role assistant.
   # adminrole assistant
   assistant:   mount:/etc/mount mount
               umount:/etc/umount mount
   # adminrole -r mount:mount assistant
   # adminrole assistant
   assistant:   mount:/etc/mount
               umount:/etc/umount mount
   #

Removing a privilege from a command for a role

Once this privilege has been removed from the database, executing mount for role assistant via tfadmin will not complete successfully.


Next topic: Removing a role
Previous topic: Adding commands and privileges for an existing role

© 2004 The SCO Group, Inc. All rights reserved.
UnixWare 7 Release 7.1.4 - 22 April 2004