# Copyright (c) 1999, 2016, Oracle and/or its affiliates. All rights reserved.
#
# /etc/security/exec_attr
#
# execution attributes for profiles. see exec_attr(4)
#
#
All:solaris:cmd:RO::*:
Audit Control:solaris:cmd:RO::/usr/sbin/audit:privs=proc_owner,sys_audit
Audit Configuration:solaris:cmd:RO::/usr/sbin/auditconfig:privs=sys_audit
Audit Review:solaris:cmd:RO::/usr/sbin/auditreduce:euid=0
Audit Review:solaris:cmd:RO::/usr/sbin/auditstat:privs=proc_audit
Audit Review:solaris:cmd:RO::/usr/sbin/praudit:privs=file_dac_read
Contract Observer:solaris:cmd:RO::/usr/bin/ctwatch:\
	privs=contract_event,contract_observer
Crypto Management:solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0
Crypto Management:solaris:cmd:RO::/usr/bin/kmfcfg:euid=0
Crypto Management:solaris:cmd:RO::/usr/sfw/bin/openssl:euid=0
Crypto Management:solaris:cmd:RO::/usr/sfw/bin/CA.pl:euid=0
DAT Administration:solaris:cmd:RO::/usr/sbin/datadm:euid=0
DHCP Management:solaris:cmd:RO::/usr/lib/inet/dhcp/svcadm/dhcpconfig:uid=0
DHCP Management:solaris:cmd:RO::/usr/lib/inet/dhcp/svcadm/dhtadm:uid=0
DHCP Management:solaris:cmd:RO::/usr/lib/inet/dhcp/svcadm/pntadm:uid=0
Device Management:solaris:cmd:RO::/usr/sbin/allocate:uid=0
Device Management:solaris:cmd:RO::/usr/sbin/add_drv:uid=0
Device Management:solaris:cmd:RO::/usr/sbin/deallocate:uid=0
Device Management:solaris:cmd:RO::/usr/sbin/rem_drv:uid=0
Device Management:solaris:cmd:RO::/usr/sbin/update_drv:uid=0
Device Security:solaris:cmd:RO::/usr/sbin/add_drv:uid=0
Device Security:solaris:cmd:RO::/usr/sbin/devfsadm:uid=0;\
	privs=sys_devices,sys_config,sys_resource,file_owner,\
	file_chown,file_chown_self,file_dac_read
Device Security:solaris:cmd:RO::/usr/sbin/eeprom:uid=0
Device Security:solaris:cmd:RO::/usr/bin/kbd:
Device Security:solaris:cmd:RO::/usr/sbin/list_devices:euid=0
Device Security:solaris:cmd:RO::/usr/sbin/rem_drv:uid=0
Device Security:solaris:cmd:RO::/usr/sbin/strace:euid=0
Device Security:solaris:cmd:RO::/usr/sbin/update_drv:uid=0
Device Security:solaris:cmd:RO::/usr/sbin/add_allocatable:euid=0
Device Security:solaris:cmd:RO::/usr/sbin/remove_allocatable:euid=0
Elastic Virtual Switch Administration:solaris:cmd:RO::/usr/lib/rad/module/mod_dlmgr.so.1:\
privs=sys_dl_config 
Elastic Virtual Switch Administration:solaris:cmd:RO::/usr/lib/rad/module/mod_evscntl.so.1:\
privs={file_dac_read}\:/etc/evs/*,{file_dac_write}\:/etc/evs/*,\
{file_chown_self}\:/etc/evs/*
Elastic Virtual Switch Observability:solaris:cmd:RO::/usr/lib/rad/module/mod_evscntl.so.1:\
privs={file_dac_read}\:/etc/evs/*
FTP Management:solaris:cmd:RO::/usr/sbin/ftpaddhost:uid=0
FTP Management:solaris:cmd:RO::/usr/sbin/ftpconfig:uid=0
FTP Management:solaris:cmd:RO::/usr/sbin/ftprestart:euid=0
FTP Management:solaris:cmd:RO::/usr/sbin/ftpshut:euid=0;egid=sys
FTP Management:solaris:cmd:RO::/usr/sbin/privatepw:uid=0;egid=sys
File System Management:solaris:cmd:RO::/usr/bin/eject:euid=0
File System Management:solaris:cmd:RO::/usr/lib/autofs/automountd:euid=0
File System Management:solaris:cmd:RO::/usr/lib/fs/autofs/automount:euid=0
File System Management:solaris:cmd:RO::/usr/lib/fs/ufs/fsirand:euid=0
File System Management:solaris:cmd:RO::/usr/lib/fs/ufs/newfs:euid=0
File System Management:solaris:cmd:RO::/usr/lib/fs/ufs/tunefs:uid=0
File System Management:solaris:cmd:RO::/usr/sbin/clri:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/devinfo:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/dfmounts:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/dfshares:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/ff:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/format:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/fsck:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/fsdb:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/fstyp:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/fuser:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/iscsiadm:euid=0;privs=basic
File System Management:solaris:cmd:RO::/usr/sbin/mkfile:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/mkfs:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/mount:privs=sys_mount
File System Management:solaris:cmd:RO::/usr/sbin/mountall:uid=0
File System Management:solaris:cmd:RO::/usr/sbin/mpathadm:privs=sys_devices
File System Management:solaris:cmd:RO::/usr/sbin/quotacheck:uid=0;gid=sys
File System Management:solaris:cmd:RO::/usr/sbin/quotaoff:uid=0;gid=sys
File System Management:solaris:cmd:RO::/usr/sbin/quotaon:uid=0;gid=sys
File System Management:solaris:cmd:RO::/usr/sbin/raidctl:privs=sys_config,sys_devices;euid=0
File System Management:solaris:cmd:RO::/usr/sbin/ramdiskadm:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/sasinfo:privs=sys_devices
File System Management:solaris:cmd:RO::/usr/sbin/sbdadm:privs=sys_devices
File System Management:solaris:cmd:RO::/usr/sbin/share:uid=0;gid=root
File System Management:solaris:cmd:RO::/usr/sbin/shareall:uid=0;gid=root
File System Management:solaris:cmd:RO::/usr/sbin/stmfadm:privs=sys_devices
File System Management:solaris:cmd:RO::/usr/sbin/suriadm:privs=sys_devices
File System Management:solaris:cmd:RO::/usr/sbin/swap:euid=0
File System Management:solaris:cmd:RO::/usr/sbin/umount:privs=sys_mount
File System Management:solaris:cmd:RO::/usr/sbin/umountall:uid=0
File System Management:solaris:cmd:RO::/usr/sbin/unshare:uid=0;gid=root
File System Management:solaris:cmd:RO::/usr/sbin/unshareall:uid=0;gid=root
Forced Privilege:solaris:cmd:RO::/usr/bin/newtask:\
    privs=proc_taskid,sys_resource,sys_res_bind
Forced Privilege:solaris:cmd:RO::/usr/bin/rcp:privs=net_privaddr
Forced Privilege:solaris:cmd:RO::/usr/bin/rlogin:privs=net_privaddr
Forced Privilege:solaris:cmd:RO::/usr/bin/rmformat:\
    privs=file_dac_read,file_dac_write,proc_fork,proc_exec,sys_mount,sys_devices
Forced Privilege:solaris:cmd:RO::/usr/bin/rsh:privs=net_privaddr
Forced Privilege:solaris:cmd:RO::/usr/bin/uptime:privs=none
Forced Privilege:solaris:cmd:RO::/usr/bin/w:privs=proc_owner
Forced Privilege:solaris:cmd:RO::/usr/sbin/quota:privs=file_dac_read
Forced Privilege:solaris:cmd:RO::/usr/lib/fs/ufs/ufsdump:privs=net_privaddr
Forced Privilege:solaris:cmd:RO::/usr/lib/fs/ufs/ufsrestore:privs=net_privaddr
Forced Privilege:solaris:cmd:RO::/usr/lib/utmp_update:\
    privs={zone}\:/system/volatile/utmp*
Forced Privilege:solaris:cmd:RO::/usr/sbin/ping:\
    privs=net_icmpaccess,sys_ip_config
Forced Privilege:solaris:cmd:RO::/usr/sbin/traceroute:\
    privs=net_icmpaccess,net_rawaccess
Forced Privilege:solaris:cmd:RO::/usr/sbin/whodo:privs=proc_owner
Forced Privilege:solaris:cmd:RO::/usr/lib/fs/smbfs/mount:privs=sys_mount
Forced Privilege:solaris:cmd:RO::/usr/lib/fs/smbfs/umount:privs=sys_mount
Idmap Name Mapping Management:solaris:cmd:RO::/usr/sbin/idmap:
Idmap Service Management:solaris:cmd:RO::/usr/sbin/idmap:
InfiniBand Management:solaris:cmd:RO::/usr/sbin/ibadm:
IP Filter Management:solaris:cmd:RO::/usr/sbin/ipf:privs=sys_ip_config
IP Filter Management:solaris:cmd:RO::/usr/sbin/ipfs:privs=sys_ip_config
IP Filter Management:solaris:cmd:RO::/usr/sbin/ipmon:privs=sys_ip_config
IP Filter Management:solaris:cmd:RO::/usr/sbin/ipfstat:privs=sys_ip_config;gid=sys
IP Filter Management:solaris:cmd:RO::/usr/sbin/ipnat:privs=sys_ip_config;gid=sys
IP Filter Management:solaris:cmd:RO::/usr/sbin/ippool:privs=sys_ip_config;gid=sys
ISNS Server Management:solaris:cmd:RO::/usr/sbin/isnsadm:
Kerberos Server Management:solaris:cmd:RO::/usr/lib/krb5/krb5kdc:uid=0
Kerberos Server Management:solaris:cmd:RO::/usr/lib/krb5/kadmind:uid=0
Kerberos Server Management:solaris:cmd:RO::/usr/lib/krb5/kprop:euid=0;privs=none
Kerberos Server Management:solaris:cmd:RO::/usr/sbin/kadmin.local:euid=0;privs=none
Kerberos Server Management:solaris:cmd:RO::/usr/sbin/kdb5_util:euid=0;privs=none
Kerberos Server Management:solaris:cmd:RO::/usr/sbin/kdb5_ldap_util:euid=0;privs=none
Kerberos Server Management:solaris:cmd:RO::/usr/sbin/kdcmgr:euid=0;privs=none
Kerberos Client Management:solaris:cmd:RO::/usr/bin/klist:euid=0;privs=file_dac_read
Kerberos Client Management:solaris:cmd:RO::/usr/sbin/kadmin:euid=0;privs=none
Kerberos Client Management:solaris:cmd:RO::/usr/sbin/kclient:euid=0;privs=none
Log Management:solaris:cmd:RO::/usr/sbin/logadm:euid=0
Mail Management:solaris:cmd:RO::/usr/lib/sendmail:uid=0
Mail Management:solaris:cmd:RO::/usr/sbin/editmap:euid=0
Mail Management:solaris:cmd:RO::/usr/sbin/makemap:euid=0
Mail Management:solaris:cmd:RO::/usr/sbin/newaliases:euid=0
Maintenance and Repair:solaris:cmd:RO::/usr/bin/mdb:privs=all
Maintenance and Repair:solaris:cmd:RO::/usr/bin/coreadm:euid=0;privs=proc_owner
Maintenance and Repair:solaris:cmd:RO::/usr/sbin/croinfo:euid=0
Maintenance and Repair:solaris:cmd:RO::/usr/sbin/eeprom:euid=0
Maintenance and Repair:solaris:cmd:RO::/usr/sbin/halt:euid=0
Maintenance and Repair:solaris:cmd:RO::/usr/sbin/init:uid=0
Maintenance and Repair:solaris:cmd:RO::/usr/sbin/pcitool:privs=all
Maintenance and Repair:solaris:cmd:RO::/usr/sbin/poweroff:uid=0
Maintenance and Repair:solaris:cmd:RO::/usr/sbin/reboot:uid=0
Maintenance and Repair:solaris:cmd:RO::/usr/sbin/shutdown:uid=0
Maintenance and Repair:solaris:cmd:RO::/usr/sbin/syslogd:euid=0
Maintenance and Repair:solaris:cmd:RO::/usr/sbin/bootadm:euid=0
Maintenance and Repair:solaris:cmd:RO::/usr/sbin/ucodeadm:privs=all
Maintenance and Repair:solaris:cmd:RO::/usr/sbin/cpustat:privs=basic,cpc_cpu
Media Backup:solaris:cmd:RO::/usr/bin/mt:euid=0
Media Backup:solaris:cmd:RO::/usr/lib/fs/ufs/ufsdump:euid=0;gid=sys
Media Backup:solaris:cmd:RO::/usr/sbin/tar:euid=0
Media Catalog:solaris:cmd:RO::/usr/bin/bart:\
	privs=file_dac_read,file_dac_search
Media Restore:solaris:cmd:RO::/usr/bin/cpio:euid=0
Media Restore:solaris:cmd:RO::/usr/bin/mt:euid=0
Media Restore:solaris:cmd:RO::/usr/lib/fs/ufs/ufsrestore:euid=0
Media Restore:solaris:cmd:RO::/usr/sbin/tar:euid=0
Name Service Management:solaris:cmd:RO::/usr/sbin/ldapclient:uid=0
Name Service Management:solaris:cmd:RO::/usr/sbin/nscd:euid=0
Name Service Management:solaris:cmd:RO::/usr/sbin/nscfg:euid=0
Name Service Management:solaris:cmd:RO::/usr/sbin/ypinit:euid=0
Name Service Security:solaris:cmd:RO::/usr/bin/chkey:euid=0
Name Service Security:solaris:cmd:RO::/usr/sbin/newkey:euid=0
Network Autoconf User:solaris:cmd:RO::/usr/sbin/netcfg:
Network LLDP:solaris:cmd:RO::/usr/sbin/lldpadm:
Network VRRP:solaris:cmd:RO::/usr/sbin/vrrpadm:
Network Management:solaris:cmd:RO::/usr/sbin/dladm:euid=dladm;egid=netadm;\
	privs=sys_dl_config,net_rawaccess,proc_audit
Network Management:solaris:cmd:RO::/usr/sbin/dlstat:euid=dladm;egid=sys;
Network Management:solaris:cmd:RO::/usr/sbin/flowadm:euid=dladm;egid=sys;\
	privs=sys_dl_config,net_rawaccess,proc_audit
Network Management:solaris:cmd:RO::/usr/sbin/flowstat:euid=dladm;egid=sys;
Network Management:solaris:cmd:RO::/usr/sbin/ipadm:euid=0;egid=netadm;privs=all
Network Management:solaris:cmd:RO::/usr/bin/ipstat:privs=dtrace_kernel
Network Management:solaris:cmd:RO::/usr/bin/netstat:uid=0
Network Management:solaris:cmd:RO::/usr/bin/rup:euid=0
Network Management:solaris:cmd:RO::/usr/bin/ruptime:euid=0
Network Management:solaris:cmd:RO::/usr/bin/setuname:euid=0
Network Management:solaris:cmd:RO::/usr/bin/tcpstat:privs=dtrace_kernel
Network Management:solaris:cmd:RO::/usr/sbin/asppp2pppd:euid=0
Network Management:solaris:cmd:RO::/usr/sbin/ifconfig:uid=0
Network Management:solaris:cmd:RO::/usr/sbin/ipaddrsel:euid=0
Network Management:solaris:cmd:RO::/usr/sbin/ipqosconf:euid=0
Network Management:solaris:cmd:RO::/usr/sbin/rndc:privs=file_dac_read
Network Management:solaris:cmd:RO::/usr/sbin/route:privs=sys_ip_config
Network Management:solaris:cmd:RO::/usr/sbin/routeadm:euid=0;\
	privs=proc_chroot,proc_owner,sys_ip_config
Network Management:solaris:cmd:RO::/usr/sbin/snoop:\
	privs=net_observability,net_rawaccess
Network Management:solaris:cmd:RO::/usr/sbin/spray:euid=0
Network Observability:solaris:cmd:RO::/usr/bin/ipstat:privs=dtrace_kernel
Network Observability:solaris:cmd:RO::/usr/bin/tcpstat:privs=dtrace_kernel
Network Observability:solaris:cmd:RO::/usr/sbin/snoop:\
	privs=net_observability,net_rawaccess
Network Observability:solaris:cmd:RO::/usr/sbin/ipfstat:privs=sys_ip_config
Network Link Security:solaris:cmd:RO::/usr/sbin/dladm:euid=dladm;egid=sys;\
	privs=sys_dl_config,net_rawaccess,proc_audit
Network Link Security:solaris:cmd:RO::/usr/sbin/dlstat:euid=dladm;egid=sys;
Network IPsec Management:solaris:cmd:RO::/usr/lib/inet/certdb:euid=0
Network IPsec Management:solaris:cmd:RO::/usr/lib/inet/certlocal:euid=0
Network IPsec Management:solaris:cmd:RO::/usr/lib/inet/certrldb:euid=0
Network IPsec Management:solaris:cmd:RO::/usr/lib/inet/in.iked:euid=0
Network IPsec Management:solaris:cmd:RO::/usr/lib/inet/in.ikev2d:uid=ikeuser;\
	gid=daemon
Network IPsec Management:solaris:cmd:RO::/usr/bin/kmfcfg:uid=ikeuser
Network IPsec Management:solaris:cmd:RO::/usr/sbin/ikeadm:euid=0;\
	privs=file_dac_write
Network IPsec Management:solaris:cmd:RO::/usr/sbin/ikecert:euid=0
Network IPsec Management:solaris:cmd:RO::/usr/sbin/ikev2cert:euid=ikeuser;\
	egid=daemon;privs=file_chown_self
Network IPsec Management:solaris:cmd:RO::/usr/sbin/ipsecconf:euid=0;\
	privs=sys_ip_config
Network IPsec Management:solaris:cmd:RO::/usr/sbin/ipseckey:uid=0;\
	privs=sys_ip_config
Network IPsec Management:solaris:cmd:RO::/usr/sbin/ipsecalgs:privs=sys_ip_config
Network TCP Key Management:solaris:cmd:RO::/usr/sbin/tcpkey:uid=0; \
	privs=sys_ip_config
Network Security:solaris:cmd:RO::/usr/sbin/ksslcfg:euid=0
Network Security:solaris:cmd:RO::/usr/bin/ssh-keygen:uid=0;gid=sys
Object Access Management:solaris:cmd:RO::/usr/bin/chgrp:privs=file_chown
Object Access Management:solaris:cmd:RO::/usr/bin/chmod:privs=file_owner
Object Access Management:solaris:cmd:RO::/usr/bin/chown:privs=file_chown
Object Access Management:solaris:cmd:RO::/usr/bin/setfacl:privs=file_owner
Object Access Management:solaris:cmd:RO::/usr/bin/getfacl:euid=0
Object Label Management:solaris:cmd:RO::/usr/sbin/labeladm:euid=0;\
	privs=sys_config
Object Label Management:solaris:cmd:RO::/usr/bin/mv:\
	privs=file_upgrade_sl,file_downgrade_sl
Object Label Management:solaris:cmd:RO::/usr/sbin/tncfg:euid=0
Process Management:solaris:cmd:RO::/usr/bin/kill:privs=proc_owner
Process Management:solaris:cmd:RO::/usr/bin/nice:privs=proc_owner,proc_priocntl
Process Management:solaris:cmd:RO::/usr/bin/pcred:privs=proc_owner
Process Management:solaris:cmd:RO::/usr/bin/pfiles:privs=all
Process Management:solaris:cmd:RO::/usr/bin/pflags:privs=proc_owner
Process Management:solaris:cmd:RO::/usr/bin/pldd:euid=0
Process Management:solaris:cmd:RO::/usr/bin/pmap:euid=0
Process Management:solaris:cmd:RO::/usr/bin/ppriv:privs=proc_owner
Process Management:solaris:cmd:RO::/usr/bin/prun:euid=0
Process Management:solaris:cmd:RO::/usr/bin/ps:euid=0
Process Management:solaris:cmd:RO::/usr/bin/psig:euid=0
Process Management:solaris:cmd:RO::/usr/bin/pstack:euid=0
Process Management:solaris:cmd:RO::/usr/bin/pstop:euid=0
Process Management:solaris:cmd:RO::/usr/bin/ptime:euid=0
Process Management:solaris:cmd:RO::/usr/bin/ptree:euid=0
Process Management:solaris:cmd:RO::/usr/bin/pwait:euid=0
Process Management:solaris:cmd:RO::/usr/bin/pwdx:euid=0
Process Management:solaris:cmd:RO::/usr/bin/renice:privs=proc_owner,proc_priocntl
Process Management:solaris:cmd:RO::/usr/bin/truss:euid=0
Process Management:solaris:cmd:RO::/usr/sbin/fuser:euid=0
Process Management:solaris:cmd:RO::/usr/sbin/rcapadm:uid=0
Project Management:solaris:cmd:RO::/usr/sbin/projadd:euid=0
Project Management:solaris:cmd:RO::/usr/sbin/projmod:euid=0
Project Management:solaris:cmd:RO::/usr/sbin/projdel:euid=0
Rights Delegation:solaris:cmd:RO::/usr/bin/profiles:euid=0
Rights Management:solaris:cmd:RO::/usr/bin/profiles:euid=0
Rights Management:solaris:cmd:RO::/usr/bin/auths:euid=0
Shadow Migration Monitor:solaris:cmd:RO::/usr/sbin/shadowstat:egid=12;\
	privs=ipc_dac_read
Software Installation:solaris:cmd:RO::/usr/sbin/beadm:uid=0;gid=bin
Software Installation:solaris:cmd:RO::/usr/bin/ln:euid=0
Software Installation:solaris:cmd:RO::/usr/bin/pkginfo:uid=0
Software Installation:solaris:cmd:RO::/usr/bin/pkgmk:uid=0
Software Installation:solaris:cmd:RO::/usr/bin/pkgparam:uid=0
Software Installation:solaris:cmd:RO::/usr/bin/pkgproto:uid=0
Software Installation:solaris:cmd:RO::/usr/bin/pkgtrans:uid=0
Software Installation:solaris:cmd:RO::/usr/ccs/bin/make:euid=0
Software Installation:solaris:cmd:RO::/usr/sbin/install:euid=0
Software Installation:solaris:cmd:RO::/usr/sbin/pkgadd:uid=0;gid=bin
Software Installation:solaris:cmd:RO::/usr/sbin/pkgask:uid=0
Software Installation:solaris:cmd:RO::/usr/sbin/pkgchk:uid=0
Software Installation:solaris:cmd:RO::/usr/sbin/pkgrm:uid=0;gid=bin
Service Configuration:solaris:cmd:RO::/usr/sbin/svcadm:
Service Configuration:solaris:cmd:RO::/usr/sbin/svccfg:
System Event Management:solaris:cmd:RO::/usr/sbin/syseventadm:uid=0
System Observability:solaris:cmd:RO::/usr/sbin/intrstat:privs=dtrace_kernel
System Observability:solaris:cmd:RO::/usr/sbin/auditstat:privs=proc_audit
System Observability:solaris:cmd:RO::/usr/sbin/lockstat:privs=dtrace_kernel
System Observability:solaris:cmd:RO::/usr/sbin/plockstat:privs=dtrace_proc
System Observability:solaris:cmd:RO::/usr/bin/mdb:privs=file_dac_read,proc_owner
System Observability:solaris:cmd:RO::/usr/bin/pcred:privs=proc_owner
System Observability:solaris:cmd:RO::/usr/bin/pflags:privs=proc_owner
System Observability:solaris:cmd:RO::/usr/bin/pfiles:privs=all
System Observability:solaris:cmd:RO::/usr/sbin/cpustat:privs=basic,cpc_cpu,sys_resource
System Observability:solaris:cmd:RO::/usr/bin/latencytop:privs=dtrace_kernel
System Observability:solaris:cmd:RO::/usr/bin/powertop:privs=dtrace_kernel
System Observability:solaris:cmd:RO::/usr/sbin/fmstat:privs=sys_admin
User Management:solaris:cmd:RO::/usr/bin/logins:privs=all
User Management:solaris:cmd:RO::/usr/sbin/grpck:euid=0
User Management:solaris:cmd:RO::/usr/sbin/pwck:euid=0
User Management:solaris:cmd:RO::/usr/sbin/useradd:euid=0
User Management:solaris:cmd:RO::/usr/sbin/userdel:euid=0
User Management:solaris:cmd:RO::/usr/sbin/usermod:euid=0
User Management:solaris:cmd:RO::/usr/sbin/roleadd:euid=0
User Management:solaris:cmd:RO::/usr/sbin/roledel:euid=0
User Management:solaris:cmd:RO::/usr/sbin/rolemod:euid=0
User Management:solaris:cmd:RO::/usr/sbin/groupadd:euid=0
User Management:solaris:cmd:RO::/usr/sbin/groupdel:euid=0
User Management:solaris:cmd:RO::/usr/sbin/groupmod:euid=0
User Security:solaris:cmd:RO::/usr/bin/logins:privs=all
User Security:solaris:cmd:RO::/usr/sbin/pwck:euid=0
User Security:solaris:cmd:RO::/usr/sbin/pwconv:euid=0
User Security:solaris:cmd:RO::/usr/sbin/usermod:euid=0
User Security:solaris:cmd:RO::/usr/sbin/rolemod:euid=0
User Security:solaris:cmd:RO::/usr/sbin/groupmod:euid=0
User Security:solaris:cmd:RO::/usr/lib/rad/module/mod_usermgr.so.1:euid=0
ZFS File System Management:solaris:cmd:RO::/usr/sbin/zfs:euid=0
ZFS Storage Management:solaris:cmd:RO::/usr/sbin/zpool:uid=0
ZFS Storage Management:solaris:cmd:RO::/usr/lib/zfs/availdevs:uid=0
Zone Security:solaris:cmd:RO::/usr/sbin/txzonemgr:uid=0
Zone Security:solaris:cmd:RO::/usr/sbin/zonecfg:uid=0
Zone Configuration:solaris:cmd:RO::/usr/sbin/zonecfg:euid=0
Zone Management:solaris:cmd:RO::/usr/sbin/zoneadm:euid=0
Zone Management:solaris:cmd:RO::/usr/sbin/zlogin:euid=0
Zone Migration:solaris:cmd:RO::/usr/sbin/zoneadm:euid=0
Zone Migration:solaris:cmd:RO::/usr/sbin/zonecfg:euid=0
Zone Migration:solaris:cmd:RO::/usr/lib/kzmigratehelper:euid=0
acctadm:solaris:cmd:RO::/usr/sbin/acctadm:euid=0;egid=0;\
	privs=sys_acct,file_dac_write