Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
For logging purposes, what is the difference between: pmrun -h ksh and pmrun -h pmksh
Description
There is a policy set up to allow a root user on one server to get a root session on another server. What is the difference between:
pmrun -h <server> ksh
and
pmrun -h <server> pmksh
Assuming that the originating user is already running a root pmksh.
Resolution
The main difference between :
pmrun -h <server> ksh
and
prmun -h <server> pmksh
is that pmksh is a Privilege Manager controlled shell. Execution of individual commands within a pmksh are controlled via the corresponding shellprofile and may be audited in the eventlogs.
Since ksh is a system shell, only the execution of the shell itself is controlled by Privilege Manager via the pmrun command. Individual commands within a ksh are not controlled by the Privilege Manager policy and are not recorded in the eventlogs.
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Recommended Content
Product(s):
Privilege Manager for Unix
5.5.2
Topic(s):
Technical Solutions
Article History:
Created on: 12/8/2010 Last Update on: 5/7/2023
Thank you for your feedback for Topic Request
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Welcome to One Identity Support
You can find online support help for*product* on an affiliate support site. Click continue to be directed to the correct support content and assistance for *product*.
The One Identity Portal no longer supports IE8, 9, & 10 and it is recommended to upgrade your browser to the latest version of Internet Explorer or Chrome.