NAME

setprivgrp − set special attributes for group

SYNOPSIS

setprivgrp −g|−n|group−name [ privileges ]

setprivgrp -f file

DESCRIPTION

Setprivgrp associates a group with a kernel capability.  This allows subsetting of super-user like privileges for members of a particular group or groups.  In the first form, the first argument to setprivgrp is a group name, −g, or −n specifying a particular group, all groups, or no groups, respectively.  The optional second and subsequent arguments are symbolic names indicating kernel capabilities.  In the second form the −f option is used to specify a file, typically /etc/privgroup, from which group capabilities are set.  The group access privileges are changed to reflect the specified kernel capabilities. 

RTPRIO accesses the rtprio(2) system call for setting real-time priorities.

MLOCK accesses the plock(2) system call for locking process text and data into memory, and the SHM_LOCK command used with the shmctl(2) system call.

CHOWN accesses the chown(2) system call.

LOCKRDONLY accesses the lockf(2) system call for setting locks on files open for reading only.

SETRUGID uses the setuid(2) and setgid(2) system calls to change, respectively, the real user ID or real group ID of a process. 

Specifying no access privileges removes any privileges that may currently be assigned.  Note that capabilities set by this command are not additive.  If you want to add a capability for a particular group, you must respecify all capabilities that were already set for that group, in addition to the new capability. 

The file named with the −f option should contain one or more lines in the following format:

−g|−n|group-name [ privileges ]

In the HP Clustered environment, privilege groups are maintained separately for each member of the cluster.  The CHOWN privilege from a cnode is determined by the privilege groups set up on the cluster server. 

Only the superuser can use this command. 

ERRORS

Setprivgrp returns 1 if caller is not super user, and 2 if there is not enough table space to hold a new privileged group assignment. 

AUTHOR

Setprivgrp was developed by the Hewlett-Packard Company. 

FILES

/etc/privgroup
/etc/group

SEE ALSO

getprivgrp(1), chown(2), getprivgrp(2), lockf(2), plock(2), rtprio(2), setuid(2), shmctl(2), privgrp(4). 

Hewlett-Packard Company  —  HP-UX Release 7.0: Sept 1989