Cross Reference: /opensolaris-onvv-gate/usr/src/uts/common/os/priv_defs

5  * Common Development and Distribution License (the "License").
11  * and limitations under the License.
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
22  * Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved.
48 	contracts created and owned by users other than the process's
51 	contracts created and owned by users other than the process's
65 	Allows process-level tracing probes to be placed and enabled in
71 	Allows use of the syscall and profile DTrace providers to
131 	only for the file owner: modify that file's access and
135 	permission bits or ACL except for the set-uid and set-gid
145 	a file without the set-user-ID and set-group-ID bits being
195 	and the effective uid of the current process is not 0.
204 	and the effective uid of the current process is not 0.
214 	applies to both shared address and zone-specific address MLPs.
222 	Allows a process to send and receive ICMP packets.
229 	The NET_MAC_AWARE process flag and the SO_MAC_EXEMPT socket
247 	Allows a process to access /dev/lo0 and the devices in /dev/ipnet/
287 	be examined cannot be seen in /proc and appear not to exist.
296 	and modify process state to other processes regardless of
300 	effective, permitted and inheritable sets; the limit set must
333 	Allows a process to enable and disable and manage accounting through
334 	acct(2), getacct(2), putacct(2) and wracct(2).
339 	as setting node and domain name and specifying nscd and coreadm
345 	Allows a process to view and set audit state (audit user ID,
347 	Allows a process to turn off and on auditing.
348 	Allows a process to configure the audit parameters (cache and
354 	Allows a process to add and remove swap devices; when adding a swap
356 	and write to the swap device.
373 	Allows a process to unlink and link directories.
378 	filesystem configuration ioctls, quota calls and creation/deletion
380 	Allows a process to mount and unmount filesystems which would
389 	Only regular files and directories can serve as mount points
392 	system call will force the "nosuid" and "restrict" options, the
409 	Allows a process to configure a system's IP interfaces and routes.
417 	Allows all that PRIV_SYS_IP_CONFIG, PRIV_SYS_DL_CONFIG, and
427 	and port 4045 (lockd).
431 	Allows a process to create and destroy PPP (sppp) interfaces.
441 	Allows a process to create and delete processor sets, assign
442 	CPUs to processor sets and override the PSET_NOESCAPE property.
445 	Allows a process to configure resource pools and to bind
451 	by setrlimit(2) and setrctl(2) without restriction.
460 	Allows a process to bind to ports reserved by NetBIOS and SMB:
462 	Session Service and SMB-over-NBT) and 445 (SMB-over-TCP).
469 	compatibility and is not used by Solaris proper.
474 	appropriate system calls: stime, adjtime, ntp_adjtime and
480 	by the process' sensitivity label to and from an external
532         Allows a process to get and set keyboard and pointer controls.
533         Allows a process to modify pointer button and key mappings.
541 	required. Thus the process must have MAC and DAC privileges that
595 	managing guest domains and the hypervisor. This privilege is
614 	privileges this process and its off-spring can obtain.