Aram Hăvărneanu 2018 6 7 2025 7 8 https://xw.is/0007/ 0007 /0007/ Solaris › Re-add "Primary Administrator" in Solaris 11 Solaris used to ship with a Primary Administrator RBAC profile, but it was removed some time in Solaris 11. We can easily add it back to the profile description and to the execution profile databases. After this, we can run pfexec(1) without a password. Run the following as root: echo 'Primary Administrator:suser:cmd:::*:uid=0;gid=0' >> /etc/security/exec_attr echo 'Primary Administrator:::All administrative tasks:auths=solaris.*;solaris.grant;help=RtPriAdmin.html' >> /etc/security/prof_attr usermod -P "Primary Administrator" aram References Context Aram Hăvărneanu 2018 6 7 https://xw.is/0009/ 0009 /0009/ Solaris › Create a new administrative user in Solaris Aram Hăvărneanu 2018 6 7 Ensure "Primary Administrator" profile exist Make sure Primary Administrator profile exists and the current user is assigned to it. Aram Hăvărneanu 2018 6 7 2025 7 8 https://xw.is/0007/ 0007 /0007/ Solaris › Re-add "Primary Administrator" in Solaris 11 Solaris used to ship with a Primary Administrator RBAC profile, but it was removed some time in Solaris 11. We can easily add it back to the profile description and to the execution profile databases. After this, we can run pfexec(1) without a password. Run the following as root: echo 'Primary Administrator:suser:cmd:::*:uid=0;gid=0' >> /etc/security/exec_attr echo 'Primary Administrator:::All administrative tasks:auths=solaris.*;solaris.grant;help=RtPriAdmin.html' >> /etc/security/prof_attr usermod -P "Primary Administrator" aram Aram Hăvărneanu 2018 6 7 Create the new user pfexec useradd -u 5008 -g staff -s /bin/bash -m -P 'Primary Administrator' -K 'defaultpriv=basic,dtrace_proc,dtrace_user' foo pfexec passwd -N foo Backlinks Related https://xw.is/solaris11/ solaris11 /solaris11/ Oracle Solaris 11 Release https://www.oracle.com/solaris/solaris11/ https://docs.oracle.com/cd/E37838_01/html/E60973/index.html Solaris 11 is the final major version of the Solaris operating system. The current minor version is Solaris 11.4. https://xw.is/solaris/ solaris /solaris/ Solaris Software https://www.oracle.com/solaris Proprietary Unix operating system originally developed by Sun Microsystems. https://xw.is/solaris-rbac/ solaris-rbac /solaris-rbac/ Solaris Roles, Rights Profiles, and Privileges Documentation https://docs.oracle.com/cd/E23824_01/html/821-1456/prbactm-1.html Role-based access control (RBAC) and process rights management. RBAC components include roles, rights profiles, and authorizations. Process rights management is implemented through privileges. Privileges work with RBAC to provide a more secure administration alternative than administration of a system by a superuser. https://xw.is/exec_attr.5 exec_attr.5 /exec_attr.5 exec_attr(5) Manual https://docs.oracle.com/cd/E88353_01/html/E37852/exec-attr-5.html Solaris execution profiles database. https://xw.is/pfexec.1 pfexec.1 /pfexec.1 pfexec(1) Manual https://docs.oracle.com/cd/E88353_01/html/E37839/pfexec-1.html Execute a command in a profile. https://xw.is/prof_attr.5 prof_attr.5 /prof_attr.5 prof_attr(5) Manual https://docs.oracle.com/cd/E88353_01/html/E37852/prof-attr-5.html Solaris profile description database. Contributions