swlist command

[mukkala_1]

normal user required swlist command access

[Torsten.]

Should work by default:

#/usr/sbin/swlist

[Dennis Handly]

You can configure it so swlist can't be used. I.e. remove SUID bit.
Or use swacl(1m) to prevent it.

[mukkala_1]

swlist command permission info

-r-sr-xr-x 11 root bin 247800 Feb 17 2007 /usr/sbin/swlist

below error i am getting while executing swlist command user level

xx1@test1[/home/test1]$ swlist
#Initializing...
#Contacting target "test1"....
WARNING: Security access denied to file " //var/adm/sw/products/INDEX".
ERROR: "test1:/": you do not have permission for this operation.
The depot owner, system administrator, or alternate root owner may need to use the "swreg" or "swacl" command to give you permission. OR, to manage applications designed and packed for nonprivileged mode, see the "run_as_superuser" option in the "sd" manpage.

[Ivan Krastev · Accepted solution]

Use swacl to check what access perms are set:
# swacl -l root

And modify it:
# swacl -l root -M any_other:r

regards,
ivan

[mukkala_1]

swac -l root output as follows

swacl -l rot
#
#swacl Installed software access control list
#
#For host: test1:/
#
#Date Fri jan 4 17:16:13 2008

# Object Ownership: User=root
Group=sys
Realm=test1
#
#default_realm=test1
object_owner:crwit

[mukkala_1]

swac -l root output as follows

swacl -l root
#
#swacl Installed software access control list
#
#For host: test1:/
#
#Date Fri jan 4 17:16:13 2008

# Object Ownership: User=root
Group=sys
Realm=test1
#
#default_realm=test1
object_owner:crwit

[mukkala_1]

is there any impact to execute this command

# swacl -l root -M any_other:r

[Torsten.]

This will give read access to any other user, that means you can do swlist with any other account.

the swacl -l root

output will show this with

any_other:-r---

in the last line.