GETPFLAGS(2) System Calls GETPFLAGS(2)

getpflags, setpflags — get or set process flags

#include <sys/types.h>
#include <priv.h>

uint_t
getpflags(uint_t flag);

int
setpflags(uint_t flag, uint_t value);

() and () obtain and modify the current per-process flags.

The following values for flag are supported:

This one bit flag takes the value of 0 (unset) or 1 (set). Only if this flag is set is the current process privilege-aware. A process can attempt to unset this flag but might fail silently if the observed set invariance condition cannot be met. Setting this flag is always successful. See privileges(7) for a discussion of this flag.
This one bit flag takes the value of 0 (unset) or 1 (set). This causes a process to pretend it is non-privilege-aware. The effective and permitted privilege set change on the change of the effective uid. When all the uid sets become the same through setuid(2) or through setreuid(2), the effective and permitted set are set to the intersection between the limit set and the inheritable set. At that point, both PRIV_AWARE and PRIV_AWARE_RESET are unset.

This flag gets automatically reset when a process becomes privilege aware, either through calling setppriv(2) or by setting PRIV_AWARE to 1.

This one bit flag takes the value of 0 (unset) or 1 (set). If this flag is set then calls to exec(2) trigger lookups in the exec_attr(5) database for the current user's profiles and the returned attributes will be applied to the new process image. This flag is inherited by the new process image unless the returned attributes cause a real user ID change.
This one bit flag takes the value of 0 (unset) or 1 (set). Only if this flag is set does the current process have privilege debugging enabled. Processes can set and unset this flag at will.
, NET_MAC_AWARE_INHERIT
These flags are available only if the system is configured with Trusted Extensions. These one bit flags each take the value of 0 (unset) or 1 (set). If the NET_MAC_AWARE flag is set then the current process is allowed to communicate with peers at labels that are different than its own, subject to MAC policy.

The NET_MAC_AWARE_INHERIT flag controls the propagation of the NET_MAC_AWARE flag. When a process performs one of the exec(2) functions, the NET_MAC_AWARE flag is unset unless the NET_MAC_AWARE_INHERIT is set. NET_MAC_AWARE_INHERIT is always unset on one of the exec(2) functions. The PRIV_NET_MAC_AWARE privilege is required to set either of these flags.

getpflags() returns the value associated with a given per-process flag. If the flag argument is invalid, (uint_t)−1 is returned and errno is set to indicate the error.

Upon successful completion, setpflags() returns 0. Otherwise, -1 is returned and errno is set to indicate the error.

getpflags() and setpflags() will fail if:

The value of flag or the value to which the flag is set is out of range.

setpflags() will fail if:

An attempt was made to unset PRIV_AWARE but the observed set invariance condition was not met.
An attempt was made to set one of the NET_MAC_AWARE or NET_MAC_AWARE_INHERIT flags without the necessary PRIV_NET_MAC_AWARE privilege.

ppriv(1), exec(2), setppriv(2), setreuid(2), setuid(2), attributes(7), privileges(7)

August 8, 2026 OmniOS