User Commands                                           profiles(1)

NAME
     profiles - print execution profiles for a user

SYNOPSIS
     profiles -l [ user...  ]

DESCRIPTION

     The profiles command prints on standard output the names of
     the execution profiles that have been assigned to you or 
     to the optionally-specified user or role name. 
     Profiles are a bundling mechanism used to
     enumerate the commands and authorizations needed to peform
     a specific function. Along with each listed executable 
     are the process attributes, such as the effective user
     and group IDs, with which the process runs when started 
     by a privileged command interpreter. The profile shells
     are pfcsh, pfksh, and pfsh.  See the pfsh(1) man page.

     Multiple profiles can be combined to construct 
     the appropriate access control. When profiles are assigned,
     the authorizations are added to the existing set. 
     If the same command appears in multiple profiles, the
     first occurrence, as determined by the ordering of the profiles,
     is used for process-attribute settings. For convenience,
     a wild card can be specified to match all commands.

     When profiles are interpreted, the profile list is 
     loaded from user_attr(4). Matching entries in prof_attr(4)
     provide the authorizations list, and matching entries in
     exec_attr(4) provide the commands list.

OPTION
     -l   List the commands in each profile followed by the
          special process attributes such as user and group
          IDs.

EXAMPLES
     An example of the profiles command's output is shown here:

          example% profiles tester01 tester02
          tester01 : Audit Management, All Commands
          tester02 : Device Management, All Commands
          example%

          example% profiles -l tester01 tester02
          tester01 : 
             Audit Management:
               /usr/sbin/audit		euid=root
               /usr/sbin/auditconfig    euid=root    egid=sys
             All Commands:
               *             
          tester02 :
             Device Management:
               /usr/bin/allocate:       euid=root 
               /usr/bin/deallocate:     euid=root
             All Commands:
               *       

FILES
     /etc/security/exec_attr
     /etc/security/prof_attr
     /etc/user_attr

ATTRIBUTES
     See attributes(5) for descriptions of the  following  attributes:

     __________________________________
    | ATTRIBUTE TYPE|  ATTRIBUTE VALUE|
    |__________________________________
    | Availability  |  SUNWcsu        |
    |_______________|_________________|

SEE ALSO
     auths(1), pfsh(1), roles(1), getprofattr(3),         
     exec_attr(4), prof_attr(4), user_attr(4), attributes(5)