-
-
Notifications
You must be signed in to change notification settings - Fork 2
vpriv.8
vpriv - Set privilege for admin user to run IndiMail commands
vpriv [options] user CommandLineSwitches
vpriv sets privileges for users to run IndiMail programs with a set of command line options. The users can be created with the mgmtpass(8) program. This allows access control on programs run by adminclient(8). vpriv can be run by the root or indimail user user, or if the user has the indimail gid as a supplementary group.
CommandLineSwitches can be a wildcard expresson or a regular expression. If you want to use regex(3), then you need to define QREGEX environment variable for indisrvr(8). An asterix (*) allows all options for program.
The below command will allow user admin to get user quota using vuserinfo(1) program.
$ sudo vpriv -i /usr/bin/vuserinfo admin '-q *'
The below command will allow user admin to use all options for the vuserinfo(1) program.
$ sudo vpriv -i /usr/bin/vuserinfo admin '*'
-s
Shows all allowed programs and command line switches enabled for the
user user.
-d program
Removes all access to program program for user user.
-i program
Adds the program program in the access control list for the given
user. Further access is given by the CommandLineSwitches argument.
-m program
Modifies the commandLineSwitches for the program program.
-D
Removes all access to all programs for the user user.
-a
Adds all IndiMail programs to the access control list of the user user
with all possible command line arguments.
Access control list applies only to programs run through the adminclient(8) program. The access control list is checked by the indisrvr program after successful authentication.
0 for success and 1 for failure in which case all diagnostics are printed on stdout.