Type list READONLY
unamemaster contains the system uname information from the policy serverclient host. This information corresponds to the list returned by uname. For example:
Type string READONLY
uniqueid is a 12-character string identifying a session. This is guaranteed to be unique on one policy server machine.
printf("Command is running as id = %s", uniqueid);Type string READONLY
use_rundir is a read-only variable containing the value "!~!". You can use it as a placeholder in the context of any runtime variable to represent the runuser's home directory, as defined on the runhost. pmlocald replaces any instances of this value found in any runtime variable with the runuser's home directory on the runhost.
allowedrequestusers={"root", "admin", "oradmin"};
//if requestuser is in allowed list, set runuser to requestuser
and set groups to match primary group on the runhost,
//and change directory to runuser's home dir
if (requestuser in allowedrequestusers)
{
runuser=requestuser;
rungroup=use_rungroup;
rungroups= {use_rungroup};
runcwd = use_rundir;
accept;
}Type string READONLY
use_rungroup is a read-only variable containing the value "!g!". Use it as a placeholder in the context of any runtime variable to represent the runuser's primary group on the runhost. pmlocald replaces any instances of this value found in any runtime variable with the runuser's primary groupname on the runhost.
allowedrequestusers={"root", "admin", "oradmin"};
//if requestuser is in allowed list, set runuser to requestuser
and set groups to match runuser's primary group only,
//and change directory to runuser's home dir
if (requestuser in allowedrequestusers)
{
runuser=requestuser;
rungroup=use_rungroup;
rungroups= {use_rungroup};
runcwd = use_rundir;
accept;
}© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center