Description
Type integer READ/WRITE
If pmshell_checkbuiltins is set to true, the Privilege Manager for Sudo shell program will check all shell builtin commands as if they were not built-ins. That is, it will match each one against the forbidden list, then the allowed list, and if no match is found, then the command will be authorized with pmmasterd. To see a full list of the builtin commands for a particular shell program, run the shell program with the -? option. The default value for this variable is false.
This variable is applicable to the pmsh, pmksh, and pmcsh programs.
Example
if (defined pmshell_cmd){ if (user !in safe_shell_list) { #check builtins pmshell_checkbuiltins=true; } }