setprivgrp - set special privileges for groups
setprivgrp groupname [privileges]
setprivgrp -g [privileges]
setprivgrp -n [privileges]
setprivgrp -f file
The setprivgrp command associates a group with a list of privileges,
thus providing access to certain system capabilities for members of a
particular group or groups. The privileges can be displayed with the
getprivgrp command (see getprivgrp(1)).
Privileges can be granted to individual groups, as defined in the
/etc/group file, and globally for all groups.
Only a superuser can use the setprivgrp command.
Options and Arguments
setprivgrp recognizes the following options and arguments:
privileges One or more of the keywords described below in
groupname The name of a group defined in the file named
/etc/group. The current privileges for groupname,
if any, are replaced by the specified privileges.
To retain prior privileges, they must be
-g Specify global privileges that apply to all
groups. The current privileges, if any, are
replaced by the specified privileges, To retain
prior privileges, they must be respecified.
-n If no privileges are specified, delete all
privileges for all groups, including global
If one or more privileges are specified, delete
the specified privileges from the current
privilege lists of all groups, including the
global privilege list, but do not delete
Hewlett-Packard Company - 1 - HP-UX Release 11i: November 2000
-f file Set the privileges according to entries in the
file file. This file is usually /etc/privgroup.
The entry formats are described below in "Group
Privileges File Format".
The following system capabilities can be granted to groups:
CHOWN Can use chown() to change file ownerships (see
LOCKRDONLY Can use lockf() to set locks on files that are
open for reading only (see lockf(2)).
MLOCK Can use plock() to lock process text and data into
memory, and the shmctl() SHM_LOCK function to lock
shared memory segments (see plock(2) and
RTPRIO Can use rtprio() to set real-time priorities (see
RTSCHED Can use sched_setparam() and sched_setscheduler()
to set POSIX.4 real-time priorities (see
SERIALIZE Can use serialize() to force the target process to
run serially with other processes that are also
marked by this system call (see serialize(2)).
SETRUGID Can use setuid() and setgid() to change,
respectively, the real user ID and real group ID
of a process (see setuid(2) and setgid(2)).
Group Privileges File Format
The file specified with the -f option should contain one or more lines
in the following formats:
They are described above in "Options and Arguments".
setprivgrp exits with one of the following values:
0 Successful completion.
Hewlett-Packard Company - 2 - HP-UX Release 11i: November 2000
setprivgrp was developed by HP.
getprivgrp(1), chown(2), getprivgrp(2), lockf(2), plock(2), rtprio(2),
rtsched(2), serialize(2), setgid(2), setuid(2), shmctl(2), privgrp(4).
Hewlett-Packard Company - 3 - HP-UX Release 11i: November 2000