.th discr_access IIa 4/21/86
.sh NAME
discr_access \- discretionary access
.sh SYNOPSIS
.nf
 bits;
.fi
.sh DESCRIPTION
The discr_access type describes the discretionary access to Kernel
objects.  Discretionary access is divided into three sets of three bits
each.  The first set refers to the object`s owner, the next to others
in the same user group, and the last to all others.  Within each set
the three bits indicate permission to read, to write, and to execute.
The execute bits are meaningful only if a process has the
privRealizeExecPermission privilege.  Each execute bit is then
equivalent to the corresponding read bit.  Setuid and setgid are
special bits used in conjunction with the execute bits.  When a process
image is created from an object with the setuid bit, the owner of the
process is temporarily changed to be the owner of that object.  Setgid
is analogous to setuid, operating on group rather than owner.
.s3
The following table contains the bit position definitions
for the discretionary access field.

.nf
	setuid           10
	setgid           9

	ownerRead        8
	ownerWrite       7
	ownerExecute     6
	groupRead        5
	groupWrite       4
	groupExecute     3
	allRead          2
	allWrite         1
	allExecute       0
.fi
.sh "SEE ALSO"
K_build_segment(II),
K_create(II),
K_set_da(II),
priv_struct(IIa)
