|
|
HP-UX Reference > Ggetprocxsec(1M)HP-UX 11i Version 2: December 2007 Update |
|
NAMEgetprocxsec — display security attributes of a process DESCRIPTIONThe getprocxsec command displays various security attributes associated with a running process. These attributes include the permitted privilege set, effective privilege set, retained privilege set, euid, and the compartment name. See privileges(5) and compartments(5). Each process has a permitted privilege set, effective privilege set, and retained privilege set. If the compartmentalization feature is enabled, it also has a compartment. When a process is created, the child process inherits these attributes from the parent. When a process executes a binary, these attributes can be changed. See setfilexsec(1M) and getfilexsec(1M) for information on how these extended attributes can be manipulated at execution time. For compatibility, the kernel handles processes with effective uid of zero in special ways. If the compartmentalization feature is disabled, these processes are treated as though they have all root replacement privileges. If, on the other hand, the compartmentalization feature is enabled, these processes are treated as though they have all the root replacement privileges except those configured as disallowed privileges for the compartment. Optionsgetprocxsec recognizes the following options:
If none of the above options are specified, the default is -perc -1. Operandsgetprocxsec recognizes the following operand:
RETURN VALUEgetprocxsec returns the following values:
EXAMPLESExample 1Display the privilege sets and compartment of the current process: # getprocxsec Sample output: effective= BASIC permitted= BASIC retained= BASIC cmpt= init euid= zero |
|