Updating the file privilege database

If critical system commands such as tfadmin(1M) or scoadmin(1M) fail consistently, it is possible that file privileges have been modified the changes are not reflected in the file privilege database (/etc/security/tcb/privs).

This can be caused by:

• Running pkgchk -f

  This command goes through the /var/sadm/install/contents file and compares file attributes in the file, with those on the filesystem. If there is a discrepancy between the two, pkgchk changes the file attributes to match the contents file. Once the file has been modified, the file privilege database is now out of sync with the actual file.

• Restoring system files

  This causes the "last update" time of the file to be modified, which does not match the last update time in the file privilege database.

To determine if the file privilege database is out of sync:

1. Log in as root on the system console or open a terminal window and use su(1M) to switch to the root login ID.

2. Enter:
   
   initprivs

   at the root login prompt.

To synchronize the file privilege database with the filesystem, run the command:

/etc/security/tools/setpriv -x

This should solve the problem.