Giới thiệu các nguyên tắc cơ bản của AutoFS AutoFS là một hệ thống tập tin cơ chế cung cấp lắp đặt tự động bằng cách sử dụng giao thức NFS. AutoFS là một khách hàng-side Giới thiệu các nguyên tắc cơ bản của AutoFS | Introducing the Component Interaction Within RBAC Figure 11-6 shows one relationship between the etc security prof_attr and the etc user_attr databases. The Printer Management profile which is defined in the etc security prof_attr database is assigned to the sysadmin role in the etc user_attr database. From the etc securỉty prof_attr database Figure 11-6 User and Profile Association Figure 11-7 shows the relationship between the etc security prof_attr and the etc security auth_attr databases. The Printer Management profile is defined in the etc security prof_attr database as having all authorizations beginning with the . string assigned to it. These authorizations are defined in the etc security auth_attr database. From the etc securỉty prof_attr database Figure 11-7 Profile and Authorization Association Configuring Role-Based Access Control RBAC Copyright 2002 Sun Microsystems Inc. All Rights Reserved. Enterprise Services Revision A 11-13 Introducing the Component Interaction Within RBAC The etc security exec_attr Database The etc security exec_attr database holds the execution attributes. An execution attribute associated with a profile is a command or a script that contains a command with options because the only way to add options to a command is by using a script . Only the users and roles assigned to this profile can run the command with special security attributes. Special security attributes refer to attributes such as UID EUID GID and EGID that can be added to a process when the command is run. The definitions of the execution attributes are stored in the etc security exec_attr database. Figure 11-8 shows the etc security exec_attr database. UbaG auth attr Authorization user attr Users Roles BAG baG exec attr prof_attr Profiles Privileges Figure 11-8 The exec_attr Database The fields in the etc security exec_attr database are separated by colons name type resl res2 id attr where name The name of the profile. Profile names are
