Type string READ/WRITE
runclienthost is a modifiable copy of the clienthost input variable.
# reject commands being issued from unknown workstations
workstations = {"sun34","sun35","sun36"};
if (!(clienthost in workstations))
reject;Type string READ/WRITE
runcommand is a modifiable copy of the command input variable. It specifies the pathname of the program that pmlocald will run.
Setting the runcomand can be a useful way of using a pseudonym for a command that an
auditor wants to disguise:
if ( command == "passcmd")
{
runcommand="/usr/bin/passwd"
runargv[0]="passwd";
runargv=replace(runargv,1,length(runargv));
}Type string READ/WRITE
Set runconfirmuser to a user name to direct pmlocald to request the runuser to authenticate as this user before running the runcommand. If authentication fails, then pmlocald rejects the session.
if ( (user in appl_users) && (command in appl_cmds) )
{
runconfirmuser=runuser;
}Type string READ/WRITE
runcwd is a modifiable copy of the cwd input variable. Specifies the working directory for pmlocald to use when setting up the runtime environment for the session.
if ( command in appl_cmds)
{
runcwd = "/home/appl_home";
}© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center