Trusted facility management

Removing commands and privileges for a role

Use adminrole with the -r option to remove commands and privileges from a role.

To remove commands and privileges from a role, perform the following:

Enter

adminrole -r command_name1:priv,priv role_name
The command_name is the name of a command defined for that role.

``Removing a privilege from a command for a role'' shows how to remove the mount privilege from the mount command for role assistant.

   # adminrole assistant
   assistant:   mount:/etc/mount mount
               umount:/etc/umount mount
   # adminrole -r mount:mount assistant
   # adminrole assistant
   assistant:   mount:/etc/mount
               umount:/etc/umount mount
   #

Removing a privilege from a command for a role

Once this privilege has been removed from the database, executing mount for role assistant via tfadmin will not complete successfully.