lpm(5)

lpm -- include file for least privilege mechanism

Synopsis

   #include <sys/lpm.h>

Description

This header file is used by the Least Privilege Module (LPM) privilege mechanism. It contains the structure definitions for the kernel privilege table used to keep track of privileges on files on the system.

These structures are as follows:

LPMftab_t: represents a linked list element for a particular privileged file on the system.
LPMdtab_t: represents a linked list element for a file system containing files that have privilege. The element for a particular file system contains a pointer to a linked list of LPMftab_t elements, each representing a privileged file on that file system.
LPMktab_t: represents a linked list element for a physical device that contains a file system or file systems that support privileges. Each element contains a pointer to a linked list of LPMdtab_t elements. Each of these elements represents a file system on that device with privileged files.

The only difference between these structures and the corresponding structures SUMftab_t, SUMdtab_t, and SUMktab_t used in the Super User Module (SUM) privilege mechanism is that the LPM structures support both fixed and inheritable privileges, while their SUM counterparts do not.

References

priv(4), sum(5)