default		allowed_privs		all
default		public
forced_privs	usr/bin/at		file_chown,file_dac_read,proc_audit_tcb
forced_privs	usr/bin/atrm		proc_audit_tcb
forced_privs	usr/bin/atq		file_dac_read
forced_privs	usr/bin/crontab		proc_audit_tcb,file_owner,file_chown,proc_setid
forced_privs	usr/bin/login		all
forced_privs	usr/bin/netstat		net_rawaccess
forced_privs	usr/bin/passwd		proc_audit_tcb
forced_privs	usr/bin/pfexec		all
forced_privs	usr/bin/rcp		net_privaddr
forced_privs	usr/bin/rdist		net_privaddr
forced_privs	usr/bin/rlogin		net_privaddr
forced_privs	usr/bin/rsh		net_privaddr
forced_privs	usr/bin/su		proc_audit_tcb,proc_setid,file_mac_write,sys_config,file_dac_write,file_downgrade_sl
forced_privs	usr/bin/uname		proc_audit_tcb
forced_privs	usr/lib/exrecover	file_mac_write
forced_privs	usr/lib/nfs/mountd	proc_audit_tcb
forced_privs	usr/lib/utmp_update	proc_setsl,proc_setid 
forced_privs	usr/sbin/add_drv	proc_audit_tcb
forced_privs	usr/sbin/allocate	all
forced_privs	usr/sbin/audit		proc_audit_tcb
forced_privs	usr/sbin/chroot		proc_audit_tcb
forced_privs	usr/sbin/dispadmin	proc_audit_tcb
forced_privs	usr/sbin/eeprom		proc_audit_tcb
forced_privs	usr/sbin/fuser		proc_audit_tcb
forced_privs	usr/sbin/halt		proc_audit_tcb
forced_privs	usr/sbin/in.rexecd	proc_audit_tcb
forced_privs	usr/sbin/in.rshd	sys_audit,proc_audit_tcb
forced_privs	usr/sbin/inetd		proc_audit_tcb
forced_privs	usr/sbin/modload	proc_audit_tcb
forced_privs	usr/sbin/modunload	proc_audit_tcb
forced_privs	usr/sbin/pbind		proc_audit_tcb
forced_privs	usr/sbin/ping		net_rawaccess,net_broadcast
forced_privs	usr/sbin/psradm		proc_audit_tcb
forced_privs	usr/sbin/reboot		proc_audit_tcb
forced_privs	usr/sbin/rem_drv	proc_audit_tcb
forced_privs	usr/sbin/uadmin		proc_audit_tcb
forced_privs	usr/sbin/installf	proc_audit_tcb
forced_privs	usr/sadm/install/bin/pkginstall	proc_audit_tcb
forced_privs	usr/sadm/install/bin/pkgremove	proc_audit_tcb
forced_privs	usr/bin/i86/setuname	proc_audit_tcb
forced_privs	usr/sbin/i86/prtconf	file_mac_read
forced_privs	usr/sbin/i86/swap	proc_audit_tcb
forced_privs	usr/sbin/i86/sysdef	file_mac_read
