pgrep/pkill not finding processes

Hi,

I have several java processes running as 'nobody' with a SECRET label. A standard 'ps -ef' from a SECRET workspace finds the processes, but not

pgrep java or pgrep -U nobody

I've tried several combinations of parameters and it seems pgrep must not be running at the right label.

Is this a bug, or is it documented anywhere ?

I've already applied patch 109017-01 and it had no effect.

Considering this is a standard way to send signals during startr/stop scripts, I'm surprised it doesn't work.

Can someone point me to an answer ?

Thanks.

J.D.

[627 byte] By [sfaguy] at [2007-11-25 23:04:36]
# 1
Obviously not.
sfaguy at 2007-7-5 17:56:12 > top of Java-index,General,Sun Alert and Security Discussion...
# 2
Are you running the ps as true root or as nobody? If nobody, then try as true root.
Red at 2007-7-5 17:56:12 > top of Java-index,General,Sun Alert and Security Discussion...
# 3

sfaguy: If you don't have anything useful to provide regarding the subject of the post, please don't post anything. Just because a question is posted doesn't mean that the members of the Support Forum are required to post an immediate answer.

<a href="http://supportforum.sun.com/conduct.php" target="_blank">http://supportforum.sun.com/conduct.php</a>

Please feel free to continue this discussion offline.

Jeff

<a href="mailto:squiddlyjdiddly&#64;netscape.net" target="_blank">squiddlyjdiddly@netscape.net</a>

JeffKent at 2007-7-5 17:56:12 > top of Java-index,General,Sun Alert and Security Discussion...
# 4

<table border="0" align="center" width="90%" cellpadding="3" cellspacing="1"><tr><td class="SmallText"><b>Jeff Kent wrote on Thu, 23 March 2006 09:00</b></td></tr><tr><td class="quote">

sfaguy: If you don't have anything useful to provide regarding the subject of the post, please don't post anything. Just because a question is posted doesn't mean that the members of the Support Forum are required to post an immediate answer.

<a href="http&#58;&#47;&#47;supportforum.sun.com/conduct.php" target="_blank">http://supportforum.sun.com/conduct.php</a>

Please feel free to continue this discussion offline.

Jeff

<a href="mailto:squiddlyjdiddly&#64;netscape.net" target="_blank">squiddlyjdiddly@netscape.net</a>

</td></tr></table>

Speaking of nothing useful to provide, let's examine your post more closely. You provided no useful information that would help sfaguy nor did you answer his question.

His original post was made back in Dec, more than 3 months ago. He followed up in March. Obviously he didn't get an "immediate" answer.

Who died and made you moderator?

<b>To quote</b>, if you don't have anything useful to provide regarding the subject of the post, please don't post anything.

KMAR

kmar at 2007-7-5 17:56:12 > top of Java-index,General,Sun Alert and Security Discussion...
# 5
Poking around in /etc/security/exec_attr I notice quite a few profileswith privs for ps but I don't see any for pgrep so you might haveto make some for yourself or your role.
TheTrustedSolarisTeam at 2007-7-5 17:56:12 > top of Java-index,General,Sun Alert and Security Discussion...