Privilege Manager for Unix 7.3 - Administration Guide

Syntax

pmcsh

Description

The Privilege Manager for Unix C Shell (pmcsh) command starts a C shell, an interactive command interpreter and a command programming language that uses syntax similar to the C programming language. The C shell carries out commands either interactively from a terminal keyboard or from a file. pmcsh is a fully featured version of csh, that provides transparent authorization and auditing for all commands submitted during the shell session. All standard options for csh are supported by pmcsh.

To see details of the options and the shell built-in commands supported by pmcsh, run pmcsh -?

Using the appropriate policy file variables, you can configure each command entered during a shell session, to be:

• forbidden by the shell without further authorization to the policy server

• allowed by the shell without further authorization to the policy server

• presented to the policy server for authorization

Once allowed by the shell, or authorized by the policy server, all commands run locally as the user running the shell program.

Options

pmcsh has the following options.

Table 58: Options: pmcsh

Option	Description
-b <file>	Runs in batch mode. Reads and runs commands from specified file.
-B	Allows the shell to run in the background.
-c <command>	Runs specified command from next argument.
-d	Loads directory stack from ~/.cshdirs.
-Dname[=value]	Defines environment variable name as specified value (DomainOS only).
-e	Exits on any error.
-f	Starts faster by ignoring the start-up file.
-F	Uses fork() instead of vfork() when spawning (ConvexOS only).
-i	Runs in interactive mode, even when input is not from a terminal.
-l	Acts as a login shell, must be the only option specified.
-m	Loads the start-up file, whether or not owned by effective user.
-n <file>	Runs in no execute mode, just checks syntax of the specified file.
-q	Accepts SIGQUIT for running under a debugger.
-s	Reads commands from standard input.
-t	Reads one line from standard input.
-v	Echos commands after history substitution.
-V	Like -v but including commands read from the start up file.
-x	Echos commands immediately before execution.
-X	Like -x but including commands read from the start up file.
--help | ?	Prints this message and exits.
--version	Prints the version shell variable and exits.

pmcsh supports the following built-in functions:

:, @, alias, alloc, bg, bindkey, break, breaksw, builtins, case, cd, chdir, complete, continue, default, dirs, echo, echotc, else, end, endif, endsw, eval, exec, exit, fg, filetest, foreach, glob, goto, hashstat, history, hup, if, jobs, kill, limit, log, login, logout, ls-F, nice, nohup, notify, onintr, popd, printenv, pushd, rehash, repeat, sched, set, setenv, settc, setty, shift, source, stop, suspend, switch, telltc, termname, time, umask, unalias, uncomplete, unhash, unlimit, unset, unsetenv, wait, where, which, while