Return
-
Title
For logging purposes, what is the difference between: pmrun -hksh and pmrun -h pmksh -
Description
There is a policy set up to allow a root user on one server to get a root session on another server. What is the difference between:
pmrun -h <server> kshandpmrun -h <server> pmkshAssuming that the originating user is already running a root pmksh.
-
Resolution
The main difference between :
pmrun -h <server> kshandprmun -h <server> pmkshis that pmksh is a Privilege Manager controlled shell. Execution of individual commands within a pmksh are controlled via the corresponding shellprofile and may be audited in the eventlogs.Since ksh is a system shell, only the execution of the shell itself is controlled by Privilege Manager via the pmrun command. Individual commands within a ksh are not controlled by the Privilege Manager policy and are not recorded in the eventlogs.