Role Based Access Control

bash-3.00#vi /etc/security/prof_attr

bash-3.00#vi /etc/security/exec_attr

bash-3.00# roleadd -d /usr/role1 -m role1
64 blocks
bash-3.00# passwd role1
New Password:
Re-enter new Password:
passwd: password successfully changed for role1
bash-3.00# rolemod -P profmgt role1
bash-3.00# roles
No roles
bash-3.00# role1
bash: role1: command not found
bash-3.00# usermod -R role1 murali
UX: usermod: murali is currently logged in, some changes may not take effect until next login.
bash-3.00# roles

No roles
bash-3.00# roles murali
role1
bash-3.00# telnet 0
Trying 0.0.0.0...
Connected to 0.
Escape character is '^]'.
login: murali
Password:
Last login: Wed Oct 13 14:36:08 from localhost
Sun Microsystems Inc.   SunOS 5.10      Generic January 2005
-bash-3.00$ format
-bash: format: command not found
-bash-3.00$ /usr/sbin/format
Searching for disks...done
No permission (or no disks found)!

-bash-3.00$ su - role1
Password:
$ /usr/sbin/format
Searching for disks...done


AVAILABLE DISK SELECTIONS:
       0. c0d0 <DEFAULT cyl 2085 alt 2 hd 255 sec 63>
          /pci@0,0/pci-ide@7,1/ide@0/cmdk@0,0
       1. c2t0d0 <DEFAULT cyl 4092 alt 2 hd 128 sec 32>
          /pci@0,0/pci15ad,1976@10/sd@0,0
       2. c2t1d0 <DEFAULT cyl 1302 alt 2 hd 255 sec 63>
          /pci@0,0/pci15ad,1976@10/sd@1,0
       3. c2t2d0 <DEFAULT cyl 1302 alt 2 hd 255 sec 63>
          /pci@0,0/pci15ad,1976@10/sd@2,0
       4. c2t3d0 <DEFAULT cyl 1302 alt 2 hd 255 sec 63>
          /pci@0,0/pci15ad,1976@10/sd@3,0
       5. c2t4d0 <DEFAULT cyl 1302 alt 2 hd 255 sec 63>
          /pci@0,0/pci15ad,1976@10/sd@4,0
Specify disk (enter its number):