Description

Type integer READ/WRITE

If pmshell_checkbuiltins is set to true, the Privilege Manager for Unix shell program will check all shell builtin commands as if they were not built-ins. That is, it will match each one against the forbidden list, then the allowed list, and if no match is found, then the command will be authorized with pmmasterd. To see a full list of the builtin commands for a particular shell program, run the shell program with the -? option. The default value for this variable is false.

This variable is applicable to the pmsh, pmksh, and pmcsh programs.

Example
if (defined pmshell_cmd){ 
   if (user !in safe_shell_list) 
   { 
      #check builtins 
      pmshell_checkbuiltins=true; 
   } 
}
Related Topics

pmshell

pmshell_restricted

pmshell_cmd

pmshell_prog

pmshell_reject

pmshell_allow

pmshell_forbid

pmshell_restricted