Does macOS and Solaris have “capabilities”?
Linux have capabilities, which are used to give a non-root process some privileges.
Does macOS and Solaris also have capabilities? if not, do they have something similar to capabilities?
linux osx solaris capabilities
edited Feb 27 at 16:15
Jeff Schaller
43.7k1161141
asked Feb 27 at 16:11
JohnJohn
23119
add a comment |
Linux have capabilities, which are used to give a non-root process some privileges.
Does macOS and Solaris also have capabilities? if not, do they have something similar to capabilities?
linux osx solaris capabilities
edited Feb 27 at 16:15
Jeff Schaller
43.7k1161141
asked Feb 27 at 16:11
JohnJohn
23119
Note that Linux is pretty much the odd one out in calling these things "capabilities". They are not the concept of capabilities as in capability-based operating systems. Other operating systems tend to call them something else.
– JdeBP
Mar 1 at 17:45
add a comment |
Linux have capabilities, which are used to give a non-root process some privileges.
Does macOS and Solaris also have capabilities? if not, do they have something similar to capabilities?
linux osx solaris capabilities
edited Feb 27 at 16:15
Jeff Schaller
43.7k1161141
asked Feb 27 at 16:11
JohnJohn
23119
Linux have capabilities, which are used to give a non-root process some privileges.
Does macOS and Solaris also have capabilities? if not, do they have something similar to capabilities?
linux osx solaris capabilities
linux osx solaris capabilities
edited Feb 27 at 16:15
Jeff Schaller
43.7k1161141
asked Feb 27 at 16:11
JohnJohn
23119
edited Feb 27 at 16:15
Jeff Schaller
43.7k1161141
asked Feb 27 at 16:11
JohnJohn
23119
edited Feb 27 at 16:15
Jeff Schaller
43.7k1161141
edited Feb 27 at 16:15
Jeff Schaller
43.7k1161141
edited Feb 27 at 16:15
Jeff Schaller
43.7k1161141
43.7k1161141
asked Feb 27 at 16:11
JohnJohn
23119
asked Feb 27 at 16:11
JohnJohn
23119
asked Feb 27 at 16:11
JohnJohn
23119
23119
Note that Linux is pretty much the odd one out in calling these things "capabilities". They are not the concept of capabilities as in capability-based operating systems. Other operating systems tend to call them something else.
– JdeBP
Mar 1 at 17:45
add a comment |
Note that Linux is pretty much the odd one out in calling these things "capabilities". They are not the concept of capabilities as in capability-based operating systems. Other operating systems tend to call them something else.
– JdeBP
Mar 1 at 17:45
Note that Linux is pretty much the odd one out in calling these things "capabilities". They are not the concept of capabilities as in capability-based operating systems. Other operating systems tend to call them something else.
– JdeBP
Mar 1 at 17:45
Note that Linux is pretty much the odd one out in calling these things "capabilities". They are not the concept of capabilities as in capability-based operating systems. Other operating systems tend to call them something else.
– JdeBP
Mar 1 at 17:45
add a comment |
2 Answers
2
active
oldest
votes
Solaris has privileges, as described here: https://docs.oracle.com/cd/E23824_01/html/821-1456/prbac-2.html. Generally, Privileges would be assigned to roles, and then roles to users, and within the roles, you can assign very granular sets of privileges to executables and scripts. Solaris RBAC seems similar at first to sudo, however it's really sort of the opposite, where you build granular privilege sets from the bottom up, in contrast to the sudo model where you try to restrict privileges from the top down.
Despite being a long time OS X user, I am not aware of any granular capabilities-like engine that can provide a similar function of regulating user and process privileges. Depending on what you need to to, you may be able to use launchd to escalate privileges for (for example) a daemon. However I don't know how granular you can be.
answered Feb 27 at 16:54
Tim KennedyTim Kennedy
14.7k23051
add a comment |
As Tim Kennedy says, Solaris has privileges (and has has them since Solaris 10). As well as being assigned to users, privileges can also be assigned to processes by using the ppriv command.
Here's a link to an article I wrote in 2006 which describes Solaris' privilege API: https://www.oracle.com/technetwork/server-storage/solaris/program-privileges-136378.html
answered Feb 28 at 20:28
Rich TeerRich Teer
311
2006 was a busy year for this. unix.stackexchange.com/a/503854/5132
– JdeBP
Mar 1 at 19:07
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f503373%2fdoes-macos-and-solaris-have-capabilities%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
Solaris has privileges, as described here: https://docs.oracle.com/cd/E23824_01/html/821-1456/prbac-2.html. Generally, Privileges would be assigned to roles, and then roles to users, and within the roles, you can assign very granular sets of privileges to executables and scripts. Solaris RBAC seems similar at first to sudo, however it's really sort of the opposite, where you build granular privilege sets from the bottom up, in contrast to the sudo model where you try to restrict privileges from the top down.
Despite being a long time OS X user, I am not aware of any granular capabilities-like engine that can provide a similar function of regulating user and process privileges. Depending on what you need to to, you may be able to use launchd to escalate privileges for (for example) a daemon. However I don't know how granular you can be.
answered Feb 27 at 16:54
Tim KennedyTim Kennedy
14.7k23051
add a comment |
Solaris has privileges, as described here: https://docs.oracle.com/cd/E23824_01/html/821-1456/prbac-2.html. Generally, Privileges would be assigned to roles, and then roles to users, and within the roles, you can assign very granular sets of privileges to executables and scripts. Solaris RBAC seems similar at first to sudo, however it's really sort of the opposite, where you build granular privilege sets from the bottom up, in contrast to the sudo model where you try to restrict privileges from the top down.
Despite being a long time OS X user, I am not aware of any granular capabilities-like engine that can provide a similar function of regulating user and process privileges. Depending on what you need to to, you may be able to use launchd to escalate privileges for (for example) a daemon. However I don't know how granular you can be.
answered Feb 27 at 16:54
Tim KennedyTim Kennedy
14.7k23051
add a comment |
Solaris has privileges, as described here: https://docs.oracle.com/cd/E23824_01/html/821-1456/prbac-2.html. Generally, Privileges would be assigned to roles, and then roles to users, and within the roles, you can assign very granular sets of privileges to executables and scripts. Solaris RBAC seems similar at first to sudo, however it's really sort of the opposite, where you build granular privilege sets from the bottom up, in contrast to the sudo model where you try to restrict privileges from the top down.
Despite being a long time OS X user, I am not aware of any granular capabilities-like engine that can provide a similar function of regulating user and process privileges. Depending on what you need to to, you may be able to use launchd to escalate privileges for (for example) a daemon. However I don't know how granular you can be.
answered Feb 27 at 16:54
Tim KennedyTim Kennedy
14.7k23051
Solaris has privileges, as described here: https://docs.oracle.com/cd/E23824_01/html/821-1456/prbac-2.html. Generally, Privileges would be assigned to roles, and then roles to users, and within the roles, you can assign very granular sets of privileges to executables and scripts. Solaris RBAC seems similar at first to sudo, however it's really sort of the opposite, where you build granular privilege sets from the bottom up, in contrast to the sudo model where you try to restrict privileges from the top down.
Despite being a long time OS X user, I am not aware of any granular capabilities-like engine that can provide a similar function of regulating user and process privileges. Depending on what you need to to, you may be able to use launchd to escalate privileges for (for example) a daemon. However I don't know how granular you can be.
answered Feb 27 at 16:54
Tim KennedyTim Kennedy
14.7k23051
answered Feb 27 at 16:54
Tim KennedyTim Kennedy
14.7k23051
answered Feb 27 at 16:54
Tim KennedyTim Kennedy
14.7k23051
answered Feb 27 at 16:54
Tim KennedyTim Kennedy
14.7k23051
14.7k23051
add a comment |
add a comment |
As Tim Kennedy says, Solaris has privileges (and has has them since Solaris 10). As well as being assigned to users, privileges can also be assigned to processes by using the ppriv command.
Here's a link to an article I wrote in 2006 which describes Solaris' privilege API: https://www.oracle.com/technetwork/server-storage/solaris/program-privileges-136378.html
answered Feb 28 at 20:28
Rich TeerRich Teer
311
2006 was a busy year for this. unix.stackexchange.com/a/503854/5132
– JdeBP
Mar 1 at 19:07
add a comment |
As Tim Kennedy says, Solaris has privileges (and has has them since Solaris 10). As well as being assigned to users, privileges can also be assigned to processes by using the ppriv command.
Here's a link to an article I wrote in 2006 which describes Solaris' privilege API: https://www.oracle.com/technetwork/server-storage/solaris/program-privileges-136378.html
answered Feb 28 at 20:28
Rich TeerRich Teer
311
2006 was a busy year for this. unix.stackexchange.com/a/503854/5132
– JdeBP
Mar 1 at 19:07
add a comment |
As Tim Kennedy says, Solaris has privileges (and has has them since Solaris 10). As well as being assigned to users, privileges can also be assigned to processes by using the ppriv command.
Here's a link to an article I wrote in 2006 which describes Solaris' privilege API: https://www.oracle.com/technetwork/server-storage/solaris/program-privileges-136378.html
answered Feb 28 at 20:28
Rich TeerRich Teer
311
As Tim Kennedy says, Solaris has privileges (and has has them since Solaris 10). As well as being assigned to users, privileges can also be assigned to processes by using the ppriv command.
Here's a link to an article I wrote in 2006 which describes Solaris' privilege API: https://www.oracle.com/technetwork/server-storage/solaris/program-privileges-136378.html
answered Feb 28 at 20:28
Rich TeerRich Teer
311
answered Feb 28 at 20:28
Rich TeerRich Teer
311
answered Feb 28 at 20:28
Rich TeerRich Teer
311
answered Feb 28 at 20:28
Rich TeerRich Teer
311
311
2006 was a busy year for this. unix.stackexchange.com/a/503854/5132
– JdeBP
Mar 1 at 19:07
add a comment |
2006 was a busy year for this. unix.stackexchange.com/a/503854/5132
– JdeBP
Mar 1 at 19:07
2006 was a busy year for this. unix.stackexchange.com/a/503854/5132
– JdeBP
Mar 1 at 19:07
2006 was a busy year for this. unix.stackexchange.com/a/503854/5132
– JdeBP
Mar 1 at 19:07
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f503373%2fdoes-macos-and-solaris-have-capabilities%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Note that Linux is pretty much the odd one out in calling these things "capabilities". They are not the concept of capabilities as in capability-based operating systems. Other operating systems tend to call them something else.
– JdeBP
Mar 1 at 17:45