Type integer READ/WRITE
runumask is a modifiable copy of the umask input variable. Specifies the umask filter which determines file permissions for files created during execution of the runcommand.
trustedusers = {"jamie", "cory", "robyn"};
if (user in trustedusers )
{
runumask=066;
}Type string READ/WRITE
runuser is a modifiable copy of the user input variable. Specifies the user name that pmlocald uses when initializing the runtime environment for the runcommand.
if ( (user == "apache") && (command == "admin.cgi") )
{
runuser="root";
}Type string READ/WRITE
runutmpuser specifies the login name of the user that will be used when updating the UNIX utmp and wtmp files when the request runs.
This variable also controls the login user name during a pmrun session, which is returned by the logname command or the getlogin system function.
If unset, it will default to the runuser variable.
TIP: If you want your site to have a more sudo-like behavior where the login user and the utmp entry contain the request user, add the following line to the policy:
runutmpuser=requestuser;
Type string READ/WRITE
subprocuser is the user name used to run any subprocesses of pmmasterd such as, when running the system function. The default value is "root".
subprocuser="appl_user";
cfile=system("find /home/applhome -name customprofile.txt");
if (status == 0)
{
print(readfile(cfile));
}© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback 利用規約 プライバシー Cookie Preference Center