Type integer READONLY
pmshell_builtin is a constant value that identifies a shell builtin command. Use it to compare with the value of the pmshell_cmdtype variable.
if (defined pmshell_cmd){
if ((user in safe_shell_list) && (pmshell_cmdtype == pmshell_builtin))
{
#allow all built-ins for selected users accept;
}
}Type integer READONLY
pmshell_cmd is only defined if the command is a Privilege Manager for Unix shell program (in which case it is set to false) or the command is a shell subcommand running from a Privilege Manager for Unix shell program (in which case it is set to true).
This variable is only applicable to the pmsh, pmksh, pmcsh, and pmbash programs.
if (defined pmshell_cmd){
if (user !in safe_shell_list)
{
#check builtins
pmshell_checkbuiltins=true;
}
}Type integer READONLY
pmshell_cmdtype is only defined if the command is a shell subcommand running from a Privilege Manager for Unix shell.
This variable is only applicable to the pmsh, pmcsh, pmksh, and pmbash programs.
It is set to one of these constant values: pmshell_builtin, pmshell_script, or pmshell_exe.
if (defined pmshell_cmd){
if (user !in safe_shell_list)
{
#check builtins
pmshell_checkbuiltins=true;
}
}Type integer READONLY
pmshell_exe contains a constant value that identifies a normal executable command. Use it to compare with the value of the pmshell_cmdtype variable.
if (defined pmshell_cmd){
if (pmshell_cmdtype == pmshell_exe)
{
if (basename(runcommand) in shell_sub_list) {
accept;
}
}
}© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center