allocate man page

User Commands                                         allocate(1)



NAME
     allocate - device allocation

SYNOPSIS
     allocate [-s] [-w] [-F] [-U uname] [-z zonename] device

     allocate [-s] [-w] [-F] [-U uname] [-z zonename] -g dev-type

DESCRIPTION
     The  allocate  utility  manages  the  ownership  of  devices
     through  its allocation mechanism. It ensures that each dev-
     ice is used by only one qualified user at a time.

     The device argument specifies the device to be  manipulated.
     To  preserve  the integrity of the device's owner, the allo-
     cate operation is executed on all the device  special  files
     associated with that device.

     The default allocate operation allocates the device  special
     files  associated with device to the uid of the current pro-
     cess.

     Only authorized users may allocate a  device.  The  required
     authorizations are specified in device_allocate(4).

     If the system is configured with Trusted  Extensions,  allo-
     cate  runs the clean program for the device before it grants
     access to the caller to that device. For devices with remov-
     able  media  that  have  a  mountable  file system, allocate
     mounts the media if the caller chooses.

OPTIONS
     The following options are supported:

     -F device        Force  allocates  either   free   or   pre-
                     allocated devices. This option is often used
                     with the -U  option  to  allocate/reallocate
                     devices  to  a  specific  user.   Only those
                     users   that   have    solaris.device.revoke
                     authorization   are   allowed  to  use  this
                     option.



     -g dev-type     Allocates devices with a device-type  match-
                     ing  dev-type.  The dev-type argument speci-
                     fies the device type to be operated on.



     -s              Silent. Suppresses any diagnostic output.




SunOS 5.10          Last change: 16 Mar 2006                    1






User Commands                                         allocate(1)



     -U uname        Uses the user ID uname instead of  the  user
                     ID  of  the  current process when performing
                     the allocate operation. Only a user with the
                     solaris.device.revoke  authorization is per-
                     mitted to use this option.



     The following options are supported with Trusted Extensions:

     -w                      Runs the device cleaning program  in
                             a  windowing  environment. If a win-
                             dowing  version   of   the   program
                             exists,  it  is used. Otherwise, the
                             standard version is run in a  termi-
                             nal window.



     -z zonename             Allocates device to the zone  speci-
                             fied by zonename.



OPERANDS
     The following operands are supported:

     device          Specifies the name of the device to be allo-
                     cated.



EXIT STATUS
     The following exit values are returned:

     non-zero        An error occurred.



FILES
     /etc/security/device_allocate

     /etc/security/device_maps

     /etc/security/dev/*

     /etc/security/lib/*

ATTRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:




SunOS 5.10          Last change: 16 Mar 2006                    2






User Commands                                         allocate(1)



     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Availability                | SUNWcsu                     |
    |_____________________________|_____________________________|
    | Interface Stability         | See below.                  |
    |_____________________________|_____________________________|


     The invocation is Evolving. The options  are  Evolving.  The
     output is unstable.

SEE ALSO
     deallocate(1),  list_devices(1),  bsmconv(1M),   dminfo(1M),
     mkdevalloc(1M),      mkdevmaps(1M),      device_allocate(4),
     device_maps(4), attributes(5)

     Controlling Access to Devices

NOTES
     The functionality described in this man  page  is  available
     only  if  the  Basic Security Module (BSM) has been enabled.
     See bsmconv(1M) for more information.

     On systems configured with  Trusted  Extensions,  the  func-
     tionality is enabled by default.

     /etc/security/dev, mkdevalloc(1M), and  mkdevmaps(1M)  might
     not  be supported in a future release of the Solaris Operat-
     ing Environment.

























SunOS 5.10          Last change: 16 Mar 2006                    3