HP-UX Reference (11i v1 00/12) - 1M System Administration Commands N-Z (vol 4)

ManualsBrandsHP ManualsSoftwareHP-UX Reference Manuals

331

332

333

334

335

336

337

338

339

340

__________________________________________________________________________________________________________________________________________________________________________________________________

STANDARD Printed by: Nora Chuang [nchuang] STANDARD

/build/1111/BRICK/man1m/naaagt.1m

________________________________________________________________

___ ___

swacl(1M) swacl(1M)

swacl -l product -D user:allen@gemini OPENVIEW @ lehi

To revoke any previously issued access to the OPENVIEW product in the default depot on host lehi by

users on host numenal:

swacl -l product -D host:numenal OPENVIEW @ lehi

To deny all access to the users steve and george for the depot /var/spool/sw at host newdist:

swacl -l depot -M user:steve:- -M user:george:- \

@ newdist:/var/spool/sw

To delete entries for local user rick from all products in the default local depot:

swacl -l product -D user:rick \*

WARNINGS

• You can edit an ACL in such a way that it will leave a system inaccessible. Do not remove all con-

trol

permissions on an ACL. (Note, however, that the local super-user can always edit SD ACLs,

regardless of permissions.)

• ACLs can grant the equivalent of local superuser permission. SD loads and runs ﬁles and scripts as

superuser. Therefore, if an SD ACL gives a user write permission on a root ﬁlesystem or insert per-

mission on a host, that user has the equivalent of superuser privileges.

• Note that swacl is not a general purpose ACL editor. It works only on ACLs protecting SD objects.

FILES

$HOME/.swdefaults

Contains the user-speciﬁc default values for some or all SD options.

/usr/lib/sw/sys.defaults

Contains the master list of current SD options (with their default values).

/var/adm/sw/

The directory which contains all of the conﬁgurable (and non-conﬁgurable) data for SD. This directory

is also the default location of logﬁles.

/var/adm/sw/defaults

Contains the active system-wide default values for some or all SD options.

/var/adm/sw/products/

The Installed Products Database (IPD), a catalog of all products installed on a system.

/var/adm/sw/security/

The directory which contains ACLs for the system itself, template ACLS, and the secrets ﬁle used to

authenticate remote requests.

/var/spool/sw/

The default location of a source and target software depot.

AUTHOR

swacl was developed by the Hewlett-Packard Company.