pmcp
Syntax
pmcp [-v]|[-z on|off[:<pid>]] [-m <masterhost>] file1 rhost:file2
Description
Use pmcp to copy a file from one host to another. The pmcp command allows you to select the policy server host to contact, bypassing the usual selection methods. The specified host must be present in the masters setting in the pm.settings file. This functionality is the same as using pmrun [-m masterhost].
You can use the following policy variables with pmcp:
| Variable | Description |
|---|---|
| filesize | Specifies the size of the source file. |
| filename | Specifies the name of the source file, including the full path. |
| filedest | Specifies the name of the target file, including the full path. |
| fileuser | Specifies the user name associated with the source file UID. |
| filegroup | Specifies the group name associated with the source file GID. |
| filedate | Specifies the date that the source file was last modified. This returns a string in the form: YYYY/MM/DD. |
Options
pmcp has the following options.
| Option | Description |
|---|---|
|
-m <masterhost> |
Selects a policy server host to contact. |
| -v | Displays product version information. |
| -z |
Enables or disables debug tracing, and optionally sends SIGHUP to running process. Refer to Enabling program-level tracing before using this option. |
pmcsh
Syntax
pmcsh
Description
The Privilege Manager C Shell (pmcsh) command starts a C shell, an interactive command interpreter and a command programming language that uses syntax similar to the C programming language. The C shell carries out commands either interactively from a terminal keyboard or from a file. pmcsh is a fully featured version of csh, that provides transparent authorization and auditing for all commands submitted during the shell session. All standard options for csh are supported by pmcsh.
To see details of the options and the shell built-in commands supported by pmcsh, run pmcsh -?
Using the appropriate policy file variables, you can configure each command entered during a shell session, to be:
- forbidden by the shell without further authorization to the policy server
- allowed by the shell without further authorization to the policy server
- presented to the policy server for authorization
Once allowed by the shell, or authorized by the policy server, all commands run locally as the user running the shell program.
Options
pmcsh has the following options.
| Option | Description |
|---|---|
| -b <file> | Runs in batch mode. Reads and runs commands from specified file. |
| -B | Allows the shell to run in the background. |
| -c <command> | Runs specified command from next argument. |
| -d | Loads directory stack from ~/.cshdirs. |
| -Dname[=value] | Defines environment variable name as specified value (DomainOS only). |
| -e | Exits on any error. |
| -f | Starts faster by ignoring the start-up file. |
| -F | Uses fork() instead of vfork() when spawning (ConvexOS only). |
| -i | Runs in interactive mode, even when input is not from a terminal. |
| -l | Acts as a login shell, must be the only option specified. |
| -m | Loads the start-up file, whether or not owned by effective user. |
| -n <file> | Runs in no execute mode, just checks syntax of the specified file. |
| -q | Accepts SIGQUIT for running under a debugger. |
| -s | Reads commands from standard input. |
| -t | Reads one line from standard input. |
| -v | Echos commands after history substitution. |
| -V | Like -v but including commands read from the start up file. |
| -x | Echos commands immediately before execution. |
| -X | Like -x but including commands read from the start up file. |
| --help | ? | Prints this message and exits. |
| --version | Prints the version shell variable and exits. |
pmcsh supports the following built-in functions:
:, @, alias, alloc, bg, bindkey, break, breaksw, builtins, case, cd, chdir, complete, continue, default, dirs, echo, echotc, else, end, endif, endsw, eval, exec, exit, fg, filetest, foreach, glob, goto, hashstat, history, hup, if, jobs, kill, limit, log, login, logout, ls-F, nice, nohup, notify, onintr, popd, printenv, pushd, rehash, repeat, sched, set, setenv, settc, setty, shift, source, stop, suspend, switch, telltc, termname, time, umask, unalias, uncomplete, unhash, unlimit, unset, unsetenv, wait, where, which, while
pmincludecheck
Syntax
pmincludecheck [-v][-p <path>][-f][-o]
Description
pmincludecheck is used by the pmsrvconfig script on the primary server only. When configuring a primary server in pmpolicy mode, if you do not have a policy file to import into the repository, then pmincludecheck initializes the policy from the current set of default policy files provided in the installation.
Options
pmincludecheck has the following options.
| Option | Description |
|---|---|
|
-v |
Displays the version number of Privilege Manager and exits. |
|
-p <path> |
Sets policyDir to the specified path. |
|
-f |
Sets policyDir to the specified file. |
|
-o |
Forces rewrite of the current policy file, which archives and replaces the current policy file. |
pminfo
|
|
NOTE: pminfo is obsolete in version 5.6 or higher and is included for backwards compatibility only. |
Syntax
pminfo -v | [ -s | -d | -r [ -m <master> ] ]
Description
The pminfo program allows the local host to register with Privilege Manager. If your Privilege Manager policy server has a host license, this registration is mandatory; agents cannot communicate successfully with the policy server until registration is completed and the policy server has allocated a license slot for the agent.
During registration, information about the local host configuration is sent to the Privilege Manager policy server. This includes a list of the agent's IP addresses.
To view the information that will be sent to the Privilege Manager policy server, run pminfo with the -s option.
The pminfo program located on an agent identifies itself to the policy server using the agent's fully qualified host name and a unique registration data string.
If the host name or IP addresses of the agent are changed, then the agent must re-register with the policy server.
Options
pminfo has the following options.
| Option | Description |
|---|---|
|
-d |
Unregisters the local host from Privilege Manager. |
|
-m <master> |
Specifies a single policy server host to register with. By default, pminfo attempts to register with all policy servers configured in etc/opt/quest/pm.settings. |
|
-r |
Registers the local host with Privilege Manager. |
|
-s |
Dumps the local host registration information to stdout. |
|
-v |
Displays the version number of Privilege Manager and exits. |
Files
- Privilege Manager for Unix configuration file: /etc/opt/quest/qpm4u/policy/pm.conf
- Privilege Manager for Unix communication parameters: /etc/opt/quest/qpm4u/pm.settings