kernauth subcommand
The kernauth subcommand provides options to display the kernel authorization table for a WPAR ID and global system.
Format
kernauth [-user | -system] | -ALL [cid]
Note: If the WPAR ID is not specified, then the
global system is displayed.
Parameters
| Item | Description |
|---|---|
| -user | Displays user authorizations |
| -system | Displays system authorizations |
| -ALL | Displays both user and system authorizations |
| cid | Specifies the WPAR ID |
Other
kat
Examples
The following is an example of how to use kat which is alias for the kernauth subcommand:
KDB(0)> kat -user
user authorizations
--------------------------------------------
nauths....11
name......Backup
flags.....0
aid.......10001
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......Diagnostics
flags.....0
aid.......10002
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......DiskQuotaAdmin
flags.....0
aid.......10003
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......GroupAdmin
flags.....0
aid.......10004
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......ListAuditClasses
flags.....0
aid.......10005
(0)> more (^C to quit) ?
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......PasswdAdmin
flags.....0
aid.......10006
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......PasswdManage
flags.....0
aid.......10007
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......UserAdmin
flags.....0
aid.......10008
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......UserAudit
flags.....0
aid.......10009
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......RoleAdmin
flags.....0
aid.......10010
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......Restore
(0)> more (^C to quit) ?
flags.....0
aid.......10011
parent....(0, 0, 0, 0, 0, 0, 0, 0)
KDB(0)>
KDB(1)> kat -user 1
user authorizations
--------------------------------------------
nauths....11
name......Backup
flags.....0
aid.......10001
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......Diagnostics
flags.....0
aid.......10002
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......DiskQuotaAdmin
flags.....0
aid.......10003
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......GroupAdmin
flags.....0
aid.......10004
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......ListAuditClasses
flags.....0
aid.......10005
(1)> more (^C to quit) ?
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......PasswdAdmin
flags.....0
aid.......10006
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......PasswdManage
flags.....0
aid.......10007
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......UserAdmin
flags.....0
aid.......10008
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......UserAudit
flags.....0
aid.......10009
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......RoleAdmin
flags.....0
aid.......10010
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......Restore
(1)> more (^C to quit) ?
flags.....0
aid.......10011
parent....(0, 0, 0, 0, 0, 0, 0, 0)
KDB(1)>
KDB(0)> kat -system
system authorizations
--------------------------------------------
nauths....266
name......aix
flags.....0
aid.......10
parent....(0, 0, 0, 0, 0, 0, 0, 0)
name......aix.device
flags.....0
aid.......500
parent....(10, 0, 0, 0, 0, 0, 0, 0)
name......aix.device.config
flags.....0
aid.......520
parent....(10, 500, 0, 0, 0, 0, 0, 0)
name......aix.device.config.path
flags.....0
aid.......525
parent....(10, 500, 520, 0, 0, 0, 0, 0)
name......aix.device.config.printer
flags.....0
aid.......530
(0)> more (^C to quit) ?
parent....(10, 500, 520, 0, 0, 0, 0, 0)
name......aix.device.config.random
flags.....0
aid.......535
parent....(10, 500, 520, 0, 0, 0, 0, 0)
name......aix.device.config.tty
flags.....0
aid.......540
parent....(10, 500, 520, 0, 0, 0, 0, 0)
name......aix.device.manage
flags.....0
aid.......550
parent....(10, 500, 0, 0, 0, 0, 0, 0)
name......aix.device.manage.change
flags.....0
aid.......555
parent....(10, 500, 550, 0, 0, 0, 0, 0)
name......aix.device.manage.create
flags.....0
aid.......560
parent....(10, 500, 550, 0, 0, 0, 0, 0)
name......aix.device.manage.list
(0)> more (^C to quit) ?
flags.....0
aid.......565
parent....(10, 500, 550, 0, 0, 0, 0, 0)
name......aix.device.manage.remove
flags.....0
aid.......570
parent....(10, 500, 550, 0, 0, 0, 0, 0)
name......aix.device.monitor
flags.....0
aid.......580
parent....(10, 500, 0, 0, 0, 0, 0, 0)
name......aix.device.monitor.tty
flags.....0
aid.......585
parent....(10, 500, 580, 0, 0, 0, 0, 0)
name......aix.device.stat
flags.....0
aid.......650
parent....(10, 500, 0, 0, 0, 0, 0, 0)
name......aix.device.stat.printer
flags.....0
aid.......655
(0)> more (^C to quit) ?
parent....(10, 500, 650, 0, 0, 0, 0, 0)
name......aix.fs
flags.....0
aid.......1000
parent....(10, 0, 0, 0, 0, 0, 0, 0)
name......aix.fs.chroot
flags.....0
aid.......1010
parent....(10, 1000, 0, 0, 0, 0, 0, 0)
name......aix.fs.manage
flags.....0
aid.......1020
parent....(10, 1000, 0, 0, 0, 0, 0, 0)
name......aix.fs.manage.backup
flags.....0
aid.......1025
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.change
flags.....0
aid.......1030
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.create
(0)> more (^C to quit) ?
flags.....0
aid.......1035
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.debug
flags.....0
aid.......1040
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.defrag
flags.....0
aid.......1045
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.dump
flags.....0
aid.......1050
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.export
flags.....0
aid.......1055
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.list
flags.....0
aid.......1060
(0)> more (^C to quit) ?
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.mount
flags.....0
aid.......1065
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.quota
flags.....0
aid.......1070
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.recover
flags.....0
aid.......1075
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.remove
flags.....0
aid.......1080
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.restore
flags.....0
aid.......1085
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.snapshot
0)> more (^C to quit) ?
flags.....0
aid.......1090
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.manage.unmount
flags.....0
aid.......1095
parent....(10, 1000, 1020, 0, 0, 0, 0, 0)
name......aix.fs.object
flags.....0
aid.......1120
parent....(10, 1000, 0, 0, 0, 0, 0, 0)
name......aix.fs.object.acl
flags.....0
aid.......1125
parent....(10, 1000, 1120, 0, 0, 0, 0, 0)
name......aix.fs.object.create
flags.....0
aid.......1140
parent....(10, 1000, 1120, 0, 0, 0, 0, 0)
name......aix.fs.object.group
flags.....0
aid.......1145
(0)> more (^C to quit) ?
parent....(10, 1000, 1120, 0, 0, 0, 0, 0)
name......aix.fs.object.list
flags.....0
aid.......1160
parent....(10, 1000, 1120, 0, 0, 0, 0, 0)
name......aix.fs.object.mode
flags.....0
aid.......1165
parent....(10, 1000, 1120, 0, 0, 0, 0, 0)
name......aix.fs.object.owner
flags.....0
aid.......1180
parent....(10, 1000, 1120, 0, 0, 0, 0, 0)
name......aix.fs.object.remove
flags.....0
aid.......1195
parent....(10, 1000, 1120, 0, 0, 0, 0, 0)
name......aix.fs.object.time
flags.....0
aid.......1200
parent....(10, 1000, 1120, 0, 0, 0, 0, 0)
name......aix.fs.stat
0)> more (^C to quit) ?
flags.....0
aid.......1205
parent....(10, 1000, 0, 0, 0, 0, 0, 0)
name......aix.lvm
flags.....0
aid.......2000
parent....(10, 0, 0, 0, 0, 0, 0, 0)
name......aix.lvm.conc
flags.....0
aid.......2020
parent....(10, 2000, 0, 0, 0, 0, 0, 0)
name......aix.lvm.debug
flags.....0
aid.......2040
parent....(10, 2000, 0, 0, 0, 0, 0, 0)
name......aix.lvm.manage
flags.....0
aid.......2050
parent....(10, 2000, 0, 0, 0, 0, 0, 0)
name......aix.lvm.manage.change
flags.....0
aid.......2055
(0)> more (^C to quit) ?
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.create
flags.....0
aid.......2060
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.export
flags.....0
aid.......2065
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.extend
flags.....0
aid.......2070
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.import
flags.....0
aid.......2075
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.join
flags.....0
aid.......2080
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.migrate
(0)> more (^C to quit) ?
flags.....0
aid.......2085
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.mirror
flags.....0
aid.......2090
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.recreate
flags.....0
aid.......2095
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.reorg
flags.....0
aid.......2100
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.remove
flags.....0
aid.......2105
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.scan
flags.....0
aid.......2110
(0)> more (^C to quit) ?
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.split
flags.....0
aid.......2115
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.sync
flags.....0
aid.......2120
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.unmirror
flags.....0
aid.......2125
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.varyoff
flags.....0
aid.......2130
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.manage.varyon
flags.....0
aid.......2140
parent....(10, 2000, 2050, 0, 0, 0, 0, 0)
name......aix.lvm.perf
(0)> more (^C to quit) ?
flags.....0
aid.......2150
parent....(10, 2000, 0, 0, 0, 0, 0, 0)
name......aix.lvm.perf.stat
flags.....0
aid.......2155
parent....(10, 2000, 2150, 0, 0, 0, 0, 0)
name......aix.lvm.perf.tune
flags.....0
aid.......2160
parent....(10, 2000, 2150, 0, 0, 0, 0, 0)
name......aix.lvm.readlvcopy
flags.....0
aid.......2200
parent....(10, 2000, 0, 0, 0, 0, 0, 0)
name......aix.mls
flags.....0
aid.......3000
parent....(10, 0, 0, 0, 0, 0, 0, 0)
name......aix.mls.boot
flags.....0
aid.......3010
(0)> more (^C to quit) ?
parent....(10, 3000, 0, 0, 0, 0, 0, 0)
name......aix.mls.clear
flags.....0
aid.......3020
parent....(10, 3000, 0, 0, 0, 0, 0, 0)
name......aix.mls.clear.read
flags.....0
aid.......3025
parent....(10, 3000, 3020, 0, 0, 0, 0, 0)
name......aix.mls.clear.write
flags.....0
aid.......3030
parent....(10, 3000, 3020, 0, 0, 0, 0, 0)
name......aix.mls.label
flags.....0
aid.......3050
parent....(10, 3000, 0, 0, 0, 0, 0, 0)
name......aix.mls.label.outsideaccred
flags.....0
aid.......3055
parent....(10, 3000, 3050, 0, 0, 0, 0, 0)
name......aix.mls.label.sl
(0)> more (^C to quit) ?
flags.....0
aid.......3060
parent....(10, 3000, 3050, 0, 0, 0, 0, 0)
name......aix.mls.label.sl.downgrade
flags.....0
aid.......3065
parent....(10, 3000, 3050, 3060, 0, 0, 0, 0)
name......aix.mls.label.sl.upgrade
flags.....0
aid.......3070
parent....(10, 3000, 3050, 3060, 0, 0, 0, 0)
name......aix.mls.label.tl
flags.....0
aid.......3080
parent....(10, 3000, 3050, 0, 0, 0, 0, 0)
name......aix.mls.label.tl.downgrade
flags.....0
aid.......3085
parent....(10, 3000, 3050, 3080, 0, 0, 0, 0)
name......aix.mls.label.tl.upgrade
flags.....0
aid.......3090
0)> more (^C to quit) ?
parent....(10, 3000, 3050, 3080, 0, 0, 0, 0)
name......aix.mls.lef
flags.....0
aid.......3100
parent....(10, 3000, 0, 0, 0, 0, 0, 0)
name......aix.mls.login
flags.....0
aid.......3120
parent....(10, 3000, 0, 0, 0, 0, 0, 0)
name......aix.mls.network
flags.....0
aid.......3150
parent....(10, 3000, 0, 0, 0, 0, 0, 0)
name......aix.mls.network.config
flags.....0
aid.......3155
parent....(10, 3000, 3150, 0, 0, 0, 0, 0)
name......aix.mls.network.init
flags.....0
aid.......3160
parent....(10, 3000, 3150, 0, 0, 0, 0, 0)
name......aix.mls.pdir
(0)> more (^C to quit) ?
flags.....0
aid.......3180
parent....(10, 3000, 0, 0, 0, 0, 0, 0)
name......aix.mls.pdir.create
flags.....0
aid.......3185
parent....(10, 3000, 3180, 0, 0, 0, 0, 0)
name......aix.mls.pdir.link
flags.....0
aid.......3190
parent....(10, 3000, 3180, 0, 0, 0, 0, 0)
name......aix.mls.pdir.mode
flags.....0
aid.......3195
parent....(10, 3000, 3180, 0, 0, 0, 0, 0)
name......aix.mls.pdir.remove
flags.....0
aid.......3200
parent....(10, 3000, 3180, 0, 0, 0, 0, 0)
name......aix.mls.pdir.set
flags.....0
aid.......3205
(0)> more (^C to quit) ?
parent....(10, 3000, 3180, 0, 0, 0, 0, 0)
name......aix.mls.printer
flags.....0
aid.......3220
parent....(10, 3000, 0, 0, 0, 0, 0, 0)
name......aix.mls.proc
flags.....0
aid.......3250
parent....(10, 3000, 0, 0, 0, 0, 0, 0)
name......aix.mls.proc.sl
flags.....0
aid.......3260
parent....(10, 3000, 3250, 0, 0, 0, 0, 0)
name......aix.mls.proc.sl.downgrade
flags.....0
aid.......3265
parent....(10, 3000, 3250, 3260, 0, 0, 0, 0)
name......aix.mls.proc.sl.upgrade
flags.....0
aid.......3270
parent....(10, 3000, 3250, 3260, 0, 0, 0, 0)
name......aix.mls.proc.stat
(0)> more (^C to quit) ?
flags.....0
aid.......3275
parent....(10, 3000, 3250, 0, 0, 0, 0, 0)
name......aix.mls.proc.tl
flags.....0
aid.......3280
parent....(10, 3000, 3250, 0, 0, 0, 0, 0)
name......aix.mls.proc.tl.downgrade
flags.....0
aid.......3285
parent....(10, 3000, 3250, 3280, 0, 0, 0, 0)
name......aix.mls.proc.tl.upgrade
flags.....0
aid.......3290
parent....(10, 3000, 3250, 3280, 0, 0, 0, 0)
name......aix.mls.stat
flags.....0
aid.......3300
parent....(10, 3000, 0, 0, 0, 0, 0, 0)
name......aix.mls.system
flags.....0
aid.......3320
(0)> more (^C to quit) ?
parent....(10, 3000, 0, 0, 0, 0, 0, 0)
name......aix.mls.system.access
flags.....0
aid.......3323
parent....(10, 3000, 3320, 0, 0, 0, 0, 0)
name......aix.mls.system.access.dir
flags.....0
aid.......3325
parent....(10, 3000, 3320, 3323, 0, 0, 0, 0)
name......aix.mls.system.config
flags.....0
aid.......3330
parent....(10, 3000, 3320, 0, 0, 0, 0, 0)
name......aix.mls.system.config.read
flags.....0
aid.......3335
parent....(10, 3000, 3320, 3330, 0, 0, 0, 0)
name......aix.mls.system.label
flags.....0
aid.......3350
parent....(10, 3000, 3320, 0, 0, 0, 0, 0)
name......aix.mls.system.label.read
(0)> more (^C to quit) ?
flags.....0
aid.......3355
parent....(10, 3000, 3320, 3350, 0, 0, 0, 0)
name......aix.mls.system.label.write
flags.....0
aid.......3360
parent....(10, 3000, 3320, 3350, 0, 0, 0, 0)
name......aix.mls.tpath
flags.....0
aid.......3380
parent....(10, 3000, 0, 0, 0, 0, 0, 0)
name......aix.mls.tty
flags.....0
aid.......3400
parent....(10, 3000, 0, 0, 0, 0, 0, 0)
name......aix.mls.tty.read
flags.....0
aid.......3405
parent....(10, 3000, 3400, 0, 0, 0, 0, 0)
name......aix.mls.tty.write
flags.....0
aid.......3410
(0)> more (^C to quit) ?
parent....(10, 3000, 3400, 0, 0, 0, 0, 0)
name......aix.network
flags.....0
aid.......4000
parent....(10, 0, 0, 0, 0, 0, 0, 0)
name......aix.network.config
flags.....0
aid.......4020
parent....(10, 4000, 0, 0, 0, 0, 0, 0)
name......aix.network.config.arp
flags.....0
aid.......4025
parent....(10, 4000, 4020, 0, 0, 0, 0, 0)
name......aix.network.config.host
flags.....0
aid.......4030
parent....(10, 4000, 4020, 0, 0, 0, 0, 0)
name......aix.network.config.mail
flags.....0
aid.......4035
parent....(10, 4000, 4020, 0, 0, 0, 0, 0)
name......aix.network.config.no
(0)> more (^C to quit) ?
flags.....0
aid.......4040
parent....(10, 4000, 4020, 0, 0, 0, 0, 0)
name......aix.network.config.route
flags.....0
aid.......4045
parent....(10, 4000, 4020, 0, 0, 0, 0, 0)
name......aix.network.config.tcpip
flags.....0
aid.......4050
parent....(10, 4000, 4020, 0, 0, 0, 0, 0)
name......aix.network.daemon
flags.....0
aid.......4070
parent....(10, 4000, 0, 0, 0, 0, 0, 0)
name......aix.network.debug
flags.....0
aid.......4100
parent....(10, 4000, 0, 0, 0, 0, 0, 0)
name......aix.network.ndaf
flags.....0
aid.......4103
parent....(10, 4000, 0, 0, 0, 0, 0, 0)