LPROTECT(8) Domain/OS BSD LPROTECT(8)
NAME
lprotect - control local protection
SYNOPSIS
/etc/lprotect [-e rootlocal] [-d rootlocal]
DESCRIPTION
The lprotect command controls local protection attributes on a node.
Currently, this command enables requests by root (locksmith) to be
honored only if they originate locally (rootlocal), i.e. from a local
process. If no options are specified, the current state of rootlocal is
returned. To change the state of the rootlocal attribute, you must be
running as root (locksmith).
OPTIONS
-e rootlocal Enables local-only root requests.
-d rootlocal Disables local-only root requests.
EXAMPLE
1. Show current status.
$ /etc/lprotect
"local-only root requests" is disabled. (-d rootlocal)
2. Enable local root requests
$ /etc/lprotect -e rootlocal
$ /etc/lprotect
"local-only root requests" is enabled.
3. Disable local root requests
$ /etc/lprotect -d rootlocal