Chatta subito con l'assistenza
Chat con il supporto

Privilege Manager for Unix 7.2.1 - Administration Guide

Introducing Privilege Manager for Unix Planning Deployment Installation and Configuration Upgrade Privilege Manager for Unix System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager for Unix Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager for Unix Variables
Variable names Variable scope Global input variables Global output variables Global event log variables PM settings variables
Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures
Environment functions Hash table functions Input and output functions LDAP functions LDAP API example List functions Miscellaneous functions Password functions Remote access functions String functions User information functions Authentication Services functions
Privilege Manager for Unix programs Installation Packages

unameclient

Description

Type list READONLY

unameclient contains the system uname information from the client host. This information corresponds to the list returned by uname. For example:

  • operating system name
  • nodename
  • operating system release level
  • operating system version
  • machine hardware name

unamemaster

Description

Type list READONLY

unamemaster contains the system uname information from the policy serverclient host. This information corresponds to the list returned by uname. For example:

  • operating system name
  • nodename
  • operating system release level
  • operating system version
  • machine hardware name

uniqueid

Description

Type string READONLY

uniqueid is a 12-character string identifying a session. This is guaranteed to be unique on one policy server machine.

Example
printf("Command is running as id = %s", uniqueid);

use_rundir

Description

Type string READONLY

use_rundir is a read-only variable containing the value "!~!". You can use it as a placeholder in the context of any runtime variable to represent the runuser's home directory, as defined on the runhost. pmlocald replaces any instances of this value found in any runtime variable with the runuser's home directory on the runhost.

Example
allowedrequestusers={"root", "admin", "oradmin"}; 
//if requestuser is in allowed list, set runuser to requestuser 
  and set groups to match primary group on the runhost, 
//and change directory to runuser's home dir 
if (requestuser in allowedrequestusers) 
{ 
   runuser=requestuser; 
   rungroup=use_rungroup; 
   rungroups= {use_rungroup}; 
   runcwd = use_rundir; 
   accept; 
}
Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione