PrepAway - Latest Free Exam Questions & Answers

How would you implement this using the RBAC framework?

The security administrator wishes to create a rights profile which is a superset of another rights profile. Certain commands in the new rights profile are to be run with different attributes to the original profile. How would you implement this using the RBAC framework?

PrepAway - Latest Free Exam Questions & Answers

A.
Copy the lines in the /etc/exec_attr file for the original rights profile and assign them to the new rights profile. Modify the attributes as necessary.

B.
Modify the /etc/exec_attr file to use a shell script which checks the rights profile being used and then executes the commands with the appropriate attributes using the pfexec command.
C Assign both rights profiles to the appropriate roles and give a higher priority to the commands for the new rights profile when different attributes are required.

C.
Use the profiles keyword when defining the new rights profile in the /etc/prof_attr file to import the original rights profile as part of the new rights profile.


Leave a Reply