Chat now with support
Chat with Support

Privilege Manager for Unix 7.1 - Administration Guide

Introducing Privilege Manager for Unix Planning Deployment Installation and Configuration Upgrade Privilege Manager for Unix System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager for Unix Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager for Unix Variables
Variable names Variable scope Global input variables Global output variables Global event log variables PM settings variables
Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures
Environment functions Hash table functions Input and output functions LDAP functions LDAP API example List functions Miscellaneous functions Password functions Remote access functions String functions User information functions Authentication Services functions
Privilege Manager for Unix programs Installation Packages

unamemaster

Description

Type list READONLY

unamemaster contains the system uname information from the policy serverclient host. This information corresponds to the list returned by uname. For example:

  • operating system name
  • nodename
  • operating system release level
  • operating system version
  • machine hardware name

uniqueid

Description

Type string READONLY

uniqueid is a 12-character string identifying a session. This is guaranteed to be unique on one policy server machine.

Example
printf("Command is running as id = %s", uniqueid);

use_rundir

Description

Type string READONLY

use_rundir is a read-only variable containing the value "!~!". You can use it as a placeholder in the context of any runtime variable to represent the runuser's home directory, as defined on the runhost. pmlocald replaces any instances of this value found in any runtime variable with the runuser's home directory on the runhost.

Example
allowedrequestusers={"root", "admin", "oradmin"}; 
//if requestuser is in allowed list, set runuser to requestuser 
  and set groups to match primary group on the runhost, 
//and change directory to runuser's home dir 
if (requestuser in allowedrequestusers) 
{ 
   runuser=requestuser; 
   rungroup=use_rungroup; 
   rungroups= {use_rungroup}; 
   runcwd = use_rundir; 
   accept; 
}

use_rungroup

Description

Type string READONLY

use_rungroup is a read-only variable containing the value "!g!". Use it as a placeholder in the context of any runtime variable to represent the runuser's primary group on the runhost. pmlocald replaces any instances of this value found in any runtime variable with the runuser's primary groupname on the runhost.

Example
allowedrequestusers={"root", "admin", "oradmin"}; 
//if requestuser is in allowed list, set runuser to requestuser 
   and set groups to match runuser's primary group only, 
//and change directory to runuser's home dir 
if (requestuser in allowedrequestusers) 
{ 
   runuser=requestuser; 
   rungroup=use_rungroup; 
   rungroups= {use_rungroup}; 
   runcwd = use_rundir; 
   accept; 
}
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating