Description

Type list READ/WRITE

pmshell_allow contains a list of regular expressions identifying Privilege Manager for Unix shell subcommands that are pre-authorized. The list may contain regular expressions.

This variable is applicable to pmsh, pmcsh, pmksh, and pmbash.

On startup, the Privilege Manager for Unix shell programs load this list. Any shell subcommand entered by the user that matches one of these expressions is pre-authorized, that is, it will be allowed to run locally without any further authorization by pmmasterd, and will not be logged as an event. By default, the list is empty.

Example
pmshell_allow = {"ls","grep"};
Related Topics

pmshell

pmshell_restricted

pmshell_checkbuiltins

pmshell_cmd

pmshell_prog

pmshell_reject

pmshell_forbid

pmshell_restricted