NAME [Toc] [Back]
setprivgrp - set special privileges for groups
SYNOPSIS [Toc] [Back]
setprivgrp groupname [privileges]
setprivgrp -g [privileges]
setprivgrp -n [privileges]
setprivgrp -f file
DESCRIPTION [Toc] [Back]
The setprivgrp command associates a group with a list of privileges,
thus providing access to certain system capabilities for members of a
particular group or groups. The privileges can be displayed with the
getprivgrp command (see getprivgrp(1)).
Privileges can be granted to individual groups, as defined in the
/etc/group file, and globally for all groups.
Only a superuser can use the setprivgrp command.
Options and Arguments [Toc] [Back]
setprivgrp recognizes the following options and arguments:
privileges One or more of the keywords described below in
groupname The name of a group defined in the file named
/etc/group. The current privileges for groupname,
if any, are replaced by the specified privileges.
To retain prior privileges, they must be
-g Specify global privileges that apply to all
groups. The current privileges, if any, are
replaced by the specified privileges, To retain
prior privileges, they must be respecified.
-n If no privileges are specified, delete all
privileges for all groups, including global
If one or more privileges are specified, delete
the specified privileges from the current
privilege lists of all groups, including the
global privilege list, but do not delete
Hewlett-Packard Company - 1 - HP-UX 11i Version 2: August 2003
-f file Set the privileges according to entries in the
file file. This file is usually /etc/privgroup.
The entry formats are described below in "Group
Privileges File Format".
Privileged Capabilities [Toc] [Back]
The following system capabilities can be granted to groups:
CHOWN Can use chown() to change file ownerships (see
LOCKRDONLY Can use lockf() to set locks on files that are
open for reading only (see lockf(2)).
MLOCK Can use plock() to lock process text and data into
memory, and the shmctl() SHM_LOCK function to lock
shared memory segments (see plock(2) and
RTPRIO Can use rtprio() to set real-time priorities (see
RTSCHED Can use sched_setparam() and sched_setscheduler()
to set POSIX.4 real-time priorities (see
SERIALIZE Can use serialize() to force the target process to
run serially with other processes that are also
marked by this system call (see serialize(2)).
SETRUGID Can use setuid() and setgid() to change,
respectively, the real user ID and real group ID
of a process (see setui
FSSTHREAD Allows certain administrative operations in the
Process Resource Manager (PRM) product. See that
product's documentation for more information.
SPUCTL Allows certain administrative operations in the
Instant Capacity On Demand (iCOD) product. See
that product's documentation for more information.
PSET Can change system pset configuration (see
MPCTL Can use mpctl() to change processor binding,
locality domain binding or launch policy of a
process (see mpctl(2)).
Group Privileges File Format [Toc] [Back]
The file specified with the -f option should contain one or more lines
Hewlett-Packard Company - 2 - HP-UX 11i Version 2: August 2003
in the following formats:
They are described above in "Options and Arguments".
RETURN VALUE [Toc] [Back]
setprivgrp exits with one of the following values:
0 Successful completion.
AUTHOR [Toc] [Back]
setprivgrp was developed by HP.
FILES [Toc] [Back]
SEE ALSO [Toc] [Back]
getprivgrp(1), chown(2), getprivgrp(2), lockf(2), plock(2), rtprio(2),
rtsched(2), serialize(2), setgid(2), setuid(2), shmctl(2), mpctl(2),
Hewlett-Packard Company - 3 - HP-UX 11i Version 2: August 2003 [ Back ]