지금 지원 담당자와 채팅
지원 담당자와 채팅

Safeguard for Sudo 7.1.1 - Administration Guide

Introducing Safeguard for Sudo Planning Deployment Installation and Configuration Upgrade Safeguard for Sudo System Administration Managing Security Policy Administering Log and Keystroke Files Troubleshooting Safeguard Variables Safeguard programs Installation Packages Unsupported Sudo Options Safeguard for Sudo Policy Evaluation

pmshell_checkbuiltins

Description

Type integer READ/WRITE

If pmshell_checkbuiltins is set to true, the Privilege Manager for Unix shell program will check all shell builtin commands as if they were not built-ins. That is, it will match each one against the forbidden list, then the allowed list, and if no match is found, then the command will be authorized with pmmasterd. To see a full list of the builtin commands for a particular shell program, run the shell program with the -? option. The default value for this variable is false.

This variable is applicable to the pmsh, pmksh, and pmcsh programs.

Example
if (defined pmshell_cmd){ 
   if (user !in safe_shell_list) 
   { 
      #check builtins 
      pmshell_checkbuiltins=true; 
   } 
}
Related Topics

pmshell

pmshell_restricted

pmshell_cmd

pmshell_prog

pmshell_reject

pmshell_allow

pmshell_forbid

pmshell_restricted

관련 문서

The document was helpful.

평가 결과 선택

I easily found the information I needed.

평가 결과 선택