Oracle Solaris 11 Advanced System Administrator — Question 9

alice is a user account used by Alice on a Solaris 11 system. sadmin is a role account on the same system.
Your task is to add the command /usr/sbin/cryptoadm to the Network management profile, so that Alice can execute it, while assuming the sadmin role.
Select the three activities necessary to accomplish this.

Answer options

• A. To the file /etc/security/prof_attr, add the line: Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0
• B. To the file /etc/security/auth_attr, add the line:Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0
• C. To the file /etc/security/exec_attr.d/local-entriies, add the line:Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0
• D. Run the roles alice to ensure that alice may assume the role sadmin.
• E. Run the command profiles sadmin to ensure that the role sadmin includes the network Management profile.
• F. Run the command profiles alice to ensure that the Alice has permissions to access the Network management profile.
• G. Run the command profiles "Network management" to ensure that the Network management profile includes the sadmin role.

Correct answer: C, D, G

Explanation

The correct steps are C, D, and G. Step C is necessary to add the command /usr/sbin/cryptoadm to the appropriate execution attributes. Step D ensures that Alice can indeed assume the sadmin role, and Step G confirms that the Network management profile includes that role. Steps A, B, and F are incorrect as they do not pertain to the required changes for enabling Alice's access to the command in the context of the specified profile.