Series 200, 300, 800 Only

NAME

setprivgrp − set special attributes for group

SYNOPSIS

setprivgrp −g|−n|group−name [ privileges ]

setprivgrp -f file

DESCRIPTION

Setprivgrp associates a group with a kernel capability.  This allows subsetting of super−user like privileges for members of a particular group or groups.  In the first form the first argument to setprivgrp is either a group name, −g, or −n which specifies a particular group, all groups or no groups respectively. The optional second and subsequent arguments are symbolic names indicating kernel capabilities.  In the second form the −f option is used to specify a file, typically /etc/privgroup, from which group capabilities are set.  The group access privileges are changed to reflect the specified kernel capabilities. 

RTPRIO
gives access to the rtprio(2) system call for setting real−time priorities.

MLOCK
gives access to the plock(2) system call for locking process text and data into memory, and the SHM_LOCK command used with shmctl(2) system call.

CHOWN
gives access to the chown(2) system call.

Specifying no access privileges removes any privileges that may currently be assigned. Note that capabilities set by this command are not additive.  If you wish to add a capability for a particular group, you need to respecify all capabilities that were already set for that group in addition to the new capability. 

The file named using the -f option should contain one or more lines in the following format:

−g|−n|group−name [ privileges ]

Only the super user may use this command. 

FILES

/etc/privgroup
/etc/group

ERRORS

Setprivgrp returns 1 if caller is not super user, and 2 if there is not enough table space to hold a new privileged group assignment. 

AUTHOR

Setprivgrp was developed by the Hewlett-Packard Company. 

SEE ALSO

getprivgrp(1), getprivgrp(2), privgrp(4), rtprio(2), plock(2), shmctl(2), chown(2). 

Hewlett-Packard Company  —  Version B.1,  May 11, 2021