NAME

add_allocatable - add entries to allocation databases and create ancillary file

SYNOPSIS

/usr/sbin/add_allocatable [ -f ] -n name -t type -d device-list [ -l minSL ] [ -h maxSL ] [ -a authorization ] [ -c clean ]

AVAILABILITY

SUNWtsolu

DESCRIPTION

add_allocatable creates or updates database entries for allocatable devices and certain non-allocatable devices and creates an ancillary file used by the allocate(1MTSOL) command to control access to an allocatable device. add_allocatable updates the device_allocate(4TSOL) and device_maps(4TSOL) databases, and it creates the ancillary file in /etc/security/dev for the specified device. The database entries and the ancillary file are needed when devices are user-allocatable. The database entries are also needed for the frame buffer and printers because the label ranges for these non-allocatable devices are managed by the device-allocation mechanism.

add_allocatable can be used in shell scripts, such as installation scripts for driver packages, to automate the administrative work of setting up a new device.

OPTIONS

-f

Force an update of an already-existing entry with the specified information. add_allocatable exits with an error if this option is not specified when an entry with the specified device name already exists.

-n name

Puts a device name name into the device-name fields of the device's entries in device_allocate and device_maps and create a zero-length ancillary file of that name in /etc/security/dev.

-t type

Puts a device type type into the device-type fields of the device's entries in device_allocate and device_maps.

-d device-list

Puts the device special file names specified in device-list into the device-list field of the device's entry in device_maps. The list of devices must be separated by white space, and the list must be quoted because white spaces are treated by the shell as argument delimiters.

-l minSL

Puts the minimum sensitivity label of the device minSL into the devminimum field of the device's entry in device_allocate. The default sensitivity label ADMIN_LOW is used when this optional argument is not specified.

-h maxSL

Puts the maximum sensitivity label maxSL into the dev-maximum field of the device's entry in device_allocate. The default sensitivity label ADMIN_HIGH is used when this optional argument is not specified

-a authorization

Puts one or more authorizations or other characters specified in authorization into the device authorization field of the device's entry in device_allocate. When more than one authorization is specified, the list must be separated by commas and must be quoted. When the device is not allocatable, authorization is specified with an asterisk (* )and

must be quoted. When the device is allocatable and is allocatable by any user, authorization is specified with the at sign (@) and must be quoted. When this optional argument is not specified, the default value '@' is used, and the device is allocatable by any user with no authorization required.

-c clean

Puts the device_clean(1MTSOL) program clean into the device-clean field of the device's entry in device_allocate(4TSOL). The default value /bin/true is used when this optional argument is not specified.

ERRORS

When successful, add_allocate returns an exit status of 0 (true). add_allocate returns a nonzero exit status in the event of an error. The exit codes are as follows:

1

Invocation syntax error

2

Unknown system error

3

A device_allocate entry already exists. This error occurs only when the -f option is not specified.

4

Permission denied. User does not have DAC or MAC access to database.

SEE ALSO

allocate(1MTSOL), device_allocate(4TSOL), device_clean(1MTSOL), device_maps(4TSOL), remove_allocatable(1MTSOL)