.th PCE VIII 4/21/86
.sh NAME
pce - privilege control editor
.sh SYNOPSIS
pce [-li] <file> +|-<priv>[,<priv>...]
.sh DESCRIPTION
Pce is used by a System Administrator to alter the privileges assigned
to trusted KSOS NKSR software images.  The privileges of trusted
software are stored as a part of the executable image file of the
program.  This editor allows the System Administrator to modify the
privilege fields of the image file in a controlled manner.
.sh
The privileges which may be assigned to an image are as follows:

.nf

         update file status                   
         link                                 
         lock seg                             
         modify priv                          
         mount                                
         set level                            
         set sticky seg                       
         set terminal path                    
         violate simple security              
         violate star security                
         violate simple integrity             
         violate star integrity               
         violate discretionary access         
         realize execute permissions          
         signal                               
         walk process table                   
         halt                                 
         perform kernel call                  
         violate compartments                 
         set terminal communication parameters
         immigrate                            
         violate tranquility                  

.fi
.sh
The possible privileges are also available by using the "-l" option
for the pce command as detailed below.
.sh
Pce is invoked from the Secure Server by a user running at
SYSTEM HIGH security and integrity levels. The user must also be able
to access the image file to be modified.
Depending on the action to performed by pce, the user can specify one or more
arguments as defined below:

.nf
     \(bu   pce -l:
              display all the possible privileges that 
              can be granted to an image

     \(bu   pce <file>:
              display the privileges currently assigned
              to the named image file

     \(bu   pce <file> <priv>[,<priv>...]:
              set the privileges of the named image file
              to those listed, removing all others

     \(bu   pce <file> +|-<priv>[,<priv>...]:
              turn on (+) or off (-) the listed
              privileges for the named image file

     \(bu   pce -i:
              enter the Privilege Control Editor in
              interactive mode. The user will be prompted
              for the file to be modified and enter a
              request loop. Requests are of the form +|-<priv>
              to turn privileges on and off.
.fi
.i0
.sh
The editor will not allow the user to create invalid or inconsistent
privileges.
.sh NOTES
Pce accesses the image file in read/write mode.
.sh "SEE ALSO"
priv_struct (IIa)
