Zurück
-
Titel
Is it possible to allow access to all commands in a directory? -
Beschreibung
Is it possible to allow access to all commands in a directory?
-
Lösung
Yes. The default profile based policy could be changed to allow all commands in a directory if the user is either in the directory or specifies the command using the full path.
-
Anhänge
-
Weitere Informationen
Attached is filename: profileBasedPolicy_withFullPathMatching.tgz. We modified the “Profile Based Policy” for version 5.5.2 to support allowing all commands within a specified directory if the user is either within the directory and prefixes the command with ./ or specifies the command using the full path.
Please make a backup copy of you current file before replacing any files.After replacing “/opt/quest/qpm4u/policies/profileBasedPolicy.conf” with the version attached, you will be able to specify an entire directory within a profile by using a wildcard character, for example;authCmds={
"id *",
"whoami",
"/usr/openv/netbackup/*"
};