Software Distributor Administration Guide (March 2009)

Table 9-2 swacl Command Options and Default Values
• rpc_timeout=5
• run_as_superuser=true
• select_local=true
• target_directory=
• targets=
• verbose=1
• admin_directory=/var/adm/sw
• distribution_target_directory=/var/spool/sw
• installed_software_catalog=products
• level=
• log_msgid=0
• lookupcache_timeout_minutes=10
• rpc_binding_info=ncacn_ip_tcp:[2121]
ncadg_ip_udp:[2121]
For More Information
See Appendix A (page 299) for complete descriptions of each default.
9.2.1 swacl Output
A typical list output from the swacl command looks like the following:
# swacl Installed Software Access Control List
#
# For host: prewd:/
#
# Date: Mon Nov 06 16:39:58 2001
#
# Object Ownership: User=root
# Group=sys
# Realm=prewd.fc.hp.com
# default_realm=prewd.fc.hp.com
object_owner:crwit
user:rml:crwit
user:[e-mail]:crwit
group:swadm:crwit
any_other:-r--t
The header information (lines marked with #) gives the object’s name and owner and
the name of the user’s realm or host name of the user’s system. In this case:
• The object is a root (installed software).
• The creator of the object (object_owner) is root@prewd.
• The object_owner has all permissions.
• Local user rml and remote user [e-mail] have all permissions.
• Members of local group swadm have all permissions.
• Anyone not matching one of the previous entries (any_other) has read and test
permissions.
For more information on the format of the ACL file, see “ACL Entries ” (page 196).
186 SD-UX Security