SETPRIVGRP(1M) — HP-UX
Series 300, 800 Only
NAME
setprivgrp − set special attributes for group
SYNOPSIS
setprivgrp −g|−n|group−name [ privileges ]
setprivgrp -f file
DESCRIPTION
Setprivgrp associates a group with a kernel capability. This allows subsetting of super−user like privileges for members of a particular group or groups. In the first form the first argument to setprivgrp is either a group name, −g, or −n which specifies a particular group, all groups or no groups respectively. The optional second and subsequent arguments are symbolic names indicating kernel capabilities. In the second form the −f option is used to specify a file, typically /etc/privgroup, from which group capabilities are set. The group access privileges are changed to reflect the specified kernel capabilities.
RTPRIO
gives access to the rtprio(2) system call for setting real−time priorities.
MLOCK
gives access to the plock(2) system call for locking process text and data into memory, and the SHM_LOCK command used with shmctl(2) system call.
CHOWN
gives access to the chown(2) system call.
Specifying no access privileges removes any privileges that may currently be assigned. Note that capabilities set by this command are not additive. If you wish to add a capability for a particular group, you need to respecify all capabilities that were already set for that group in addition to the new capability.
The file named using the -f option should contain one or more lines in the following format:
−g|−n|group−name [ privileges ]
Only the superuser may use this command.
ERRORS
Setprivgrp returns 1 if caller is not super user, and 2 if there is not enough table space to hold a new privileged group assignment.
DEPENDENCIES
Series 300 Diskless
In a clustered environment privilege groups are maintained separately on each machine in the cluster. The CHOWN privilege from diskless nodes is determined by the privilege groups set up on the root server.
AUTHOR
Setprivgrp was developed by the Hewlett-Packard Company.
FILES
/etc/privgroup
/etc/group
SEE ALSO
getprivgrp(1), getprivgrp(2), privgrp(4), rtprio(2), plock(2), shmctl(2), chown(2).
Hewlett-Packard Company — Version B.1, May 11, 2021