Setting Access Authority

Example: Give an internal User Read Access

The following selang command adds the internal user internal_user to the ACL of terminal tty30, to give read access to the terminal:

authorize TERMINAL tty30 access(READ) uid(internal_user)

Example: Give an Enterprise User Read Access

The following selang command adds the enterprise user Terry to the ACL of terminal tty30, to give read access to the terminal:

authorize TERMINAL tty30 access(READ) xuid(Terry)

Example: Change an Access Authority of an Enterprise User to a Resource

The following selang command sets Terry's access to terminal tty30 to none, and so denies Terry access:

authorize TERMINAL tty30 access(NONE) xuid(Terry)

Example: Remove the Access Authority of an Enterprise User from a Resource

The following selang command removes Terry from the ACL in the terminal tty30:

authorize‑ TERMINAL tty30 xuid(Terry) access-

Terry now has the default access to the terminal.

Example: Give an Enterprise User Sub-administrator Access

The following selang commands set up the enterprise user Terry as a sub-administrator with the authority to manage users and files:

authorize ADMIN USER xuid(Terry)
authorize ADMIN FILE xuid(Terry)