Type list READONLY
pmshell_readonly is only defined if the command is a shell subcommand running from within a Privilege Manager shell program (pmsh, pmcsh, and pmksh). You can set this variable to a list of environment variables to mark as readonly in the shell. It defaults to an empty list.
if (defined pmshell)
{
#set some application specific readonly variables for the shell
pmshell_readonly={"PATH", "SHELL", "APPL_HOME"};
}Type string READ/WRITE
The pmshell_reject string is displayed by the Privilege Manager shell programs (pmsh, pmcsh, pmksh, and pmbash) for any shell subcommands rejected because they are listed in pmshell_forbid. The default is "Request Rejected".
pmshell_reject = "Your request has been rejected by the shell";
Type integer READ/WRITE
If pmshell_restricted is set to true, then the Privilege Manager shell program is run as a restricted shell. This means that the user cannot:
These restrictions are applied without any further authorization by the policy server. The default for this variable is false.
This variable is applicable to the pmsh, pmcsh, pmksh, and pmbash programs.
if (user != "root")
{
pmshell_restricted = true;
}Type integer READ/WRITE
The clienthost variable normally matches the host name on which the pmrun client was run. To preserve the host name of the login host instead, set the preserve_clienthost variable to true.
print("User has logged in from host:%s\n", clienthost);© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy