NAME

deallocate - device deallocation

SYNOPSIS

deallocate [ -s ] device

deallocate [ -s ] [ -F ] device

deallocate [ -s ] -I

AVAILABILITY

The functionality described in this man page is available only if the Basic Security Module (BSM) has been enabled. See bsmconv(1M) for more information.

DESCRIPTION

deallocate deallocates a device allocated to the evoking user. device can be a device defined in device_allocate(4) or one of the device special files associated with the device. It resets the ownership and the permission on all device special files associated with device, disabling the user's access to that device. This option can be used by the super user to remove access to the device by another user.

When deallocation or forced deallocation is performed, the appropiate device cleaning program is executed, based on the contents of device_allocate(4). These cleaning programs are normally stored in /etc/security/lib.

OPTIONS

device

Deallocate the device associated with the device special file specified by device.

-s

Silent. Suppress any diagnostic output.

-F device

Force deallocation of the device associated with the file specified by device. Only the super user is permitted to use this option.

-I

Force deallocation of all allocatable devices. Only the super user is permitted to use this option. This option should only be used at system initialization.

DIAGNOSTICS

deallocate returns an nonzero exit status in the event of an error.

FILES

/etc/security/device_allocate

/etc/security/device_maps
/etc/security/dev/*
/etc/security/lib/*

SEE ALSO

allocate(1M), bsmconv(1M), device_allocate(4), device_maps(4)