Solaris 8 Security

RBAC

Once available only in trusted operating systems (such as Trusted Solaris 8, described in Appendix G), RBAC is now available with standard Solaris. Roles are accounts with a special setup (such as rights and privileges) designed for specific purposes. However, the difference between normal user accounts and role accounts is that users cannot log in directly to a role. They should log in as themselves (using regular usernames) and then su to a role.

Another restriction is that a role cannot assume another role. You must first log out from the current role and then assume another role. All roles can be configured to suit the particular needs of the organization, depending on its structure and requirements. This section shows you how to configure ...