Administering privilege

Removing privileges from existing files

To remove all privileges associated with an executable, use filepriv with the -d option. As with setting privileges, you must specify an absolute path when deleting privileges.

You must be functioning as root to perform this action.

To remove all privilege from a file, perform the following:

Enter

filepriv -d filename
The filename specified must be the full pathname.

``Removing privileges from an executable file'' shows how to remove all privileges for /sbin/nuzz. Of course once the privileges are removed /sbin/nuzz will no longer work as expected because it no longer has the privileges required to complete its task.

   # filepriv /sbin/nuzz
   fixed   dacread
   # filepriv -d /sbin/nuzz
   # filepriv /sbin/nuzz
   #

Removing privileges from an executable file

See filepriv(1M) for more details.