Installing a new program requiring privileges

You can also use filepriv to set privileges on files. Because filepriv removes all privileges currently associated with the file before the privileges specified on the command line are applied, you must specify all privileges for a file during one invocation of filepriv. Finally, you must specify the absolute path of a file when setting privileges.

You must be functioning as root to perform this action.

To set the fixed privileges for a file, perform the following:

1. Use filepriv with the -f option to define the fixed privileges. Enter
   
   filepriv -f priv,priv... filename

   The filename must be the full pathname of the file.

Suppose, for example, you want to install a new program /sbin/muzz which always requires privilege to override DAC read restrictions. Therefore, you want to make dacread a fixed privilege.

Using the example of the muzz program, to set the required privileges for the program, enter:

filepriv -f dacread /sbin/muzz