The Question is:
In testing an ACL, I need to remove some process rights from an id. I have
tried "SET RIGHT_LISTS <right> /DISABLE/ID=<pid>". I get a change Kernel mode
error. Is there another command or am I issuing the command incorrectly?
I am a senior developer working with our Sys. Admins. I have posed the
question to them as well. Any help would be appreciated.
The Answer is :
$ help/message NOCMKRNL
NOCMKRNL, operation requires CMKRNL privilege
Facility: SYSTEM, System Services
Explanation: A command or program requested a system function that requires
CMKRNL privilege; the current process does not have this
User Action: If the message is in response to a command entered
interactively, verify that a command or a qualifier was not
used for a particular command that requires a specific user
If the message occurs during the execution of a program,
determine the system service call that resulted in the error.
Verify that a service or an argument was not used for a
particular service that requires a user privilege that you
do not have.
In either case, correct the command or program so that you do
not request the privileged function. If you determine that you
need the privilege for an application, ask your system manager
to give you the necessary privilege.