1*7c478bd9Sstevel@tonic-gate<HTML> 2*7c478bd9Sstevel@tonic-gate<!-- 3*7c478bd9Sstevel@tonic-gate CDDL HEADER START 4*7c478bd9Sstevel@tonic-gate 5*7c478bd9Sstevel@tonic-gate The contents of this file are subject to the terms of the 6*7c478bd9Sstevel@tonic-gate Common Development and Distribution License, Version 1.0 only 7*7c478bd9Sstevel@tonic-gate (the "License"). You may not use this file except in compliance 8*7c478bd9Sstevel@tonic-gate with the License. 9*7c478bd9Sstevel@tonic-gate 10*7c478bd9Sstevel@tonic-gate You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 11*7c478bd9Sstevel@tonic-gate or http://www.opensolaris.org/os/licensing. 12*7c478bd9Sstevel@tonic-gate See the License for the specific language governing permissions 13*7c478bd9Sstevel@tonic-gate and limitations under the License. 14*7c478bd9Sstevel@tonic-gate 15*7c478bd9Sstevel@tonic-gate When distributing Covered Code, include this CDDL HEADER in each 16*7c478bd9Sstevel@tonic-gate file and include the License file at usr/src/OPENSOLARIS.LICENSE. 17*7c478bd9Sstevel@tonic-gate If applicable, add the following below this CDDL HEADER, with the 18*7c478bd9Sstevel@tonic-gate fields enclosed by brackets "[]" replaced with your own identifying 19*7c478bd9Sstevel@tonic-gate information: Portions Copyright [yyyy] [name of copyright owner] 20*7c478bd9Sstevel@tonic-gate 21*7c478bd9Sstevel@tonic-gate CDDL HEADER END 22*7c478bd9Sstevel@tonic-gate 23*7c478bd9Sstevel@tonic-gate-- Copyright 2000 Sun Microsystems, Inc. All rights reserved. 24*7c478bd9Sstevel@tonic-gate-- Use is subject to license terms. 25*7c478bd9Sstevel@tonic-gate--> 26*7c478bd9Sstevel@tonic-gate<HEAD> 27*7c478bd9Sstevel@tonic-gate <TITLE> </TITLE> 28*7c478bd9Sstevel@tonic-gate 29*7c478bd9Sstevel@tonic-gate 30*7c478bd9Sstevel@tonic-gate</HEAD> 31*7c478bd9Sstevel@tonic-gate<BODY> 32*7c478bd9Sstevel@tonic-gate<!-- ident "%Z%%M% %I% %E% SMI" --> 33*7c478bd9Sstevel@tonic-gate 34*7c478bd9Sstevel@tonic-gate 35*7c478bd9Sstevel@tonic-gateWhen All is in the Rights Included column, it grants the right for a user or role to use any command when working in an administrator's shell, such as the Administrator's Korn or Administrator's C shells. 36*7c478bd9Sstevel@tonic-gate<p> 37*7c478bd9Sstevel@tonic-gateThe normal policy for these shells is that they can only execute commands that have been explicitly assigned to a user (or role) through granted rights. Because using only the granted rights can be very limiting, it is common to give users the All right, which has a wild card entry matching every command. 38*7c478bd9Sstevel@tonic-gate<p> 39*7c478bd9Sstevel@tonic-gateHowever, no special process attributes are associated with the wild card, so the effect is that all commands matching the wild card run with the uid and gid of the current user (or role). 40*7c478bd9Sstevel@tonic-gate<p> 41*7c478bd9Sstevel@tonic-gateIf you assign this right, it should always be last in the list of rights. If it is first, no other rights are consulted when looking up command attributes. 42*7c478bd9Sstevel@tonic-gate<p> 43*7c478bd9Sstevel@tonic-gateIf All is grayed, then you are not entitled to Add or Remove this right. 44*7c478bd9Sstevel@tonic-gate</BODY> 45*7c478bd9Sstevel@tonic-gate</HTML> 46