Chat now with support
Chat with Support

Privilege Manager for Unix 6.1.1 - Administration Guide for Unix

One Identity Privileged Access Suite for Unix Introducing Privilege Manager for Unix Planning Deployment Installation and Configuration Upgrade Privilege Manager for Unix System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager Variables Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures Privilege Manager programs Installation Packages

runnice

Description

Type integer READ/WRITE

runnice specifies the execution priority that pmlocald sets when initializing the runtime environment. (For more details, see the UNIX man pages for nice.)

Example
if ( timebetween(900,1630) ) 
{ 
   runnice=010; 
} 
   else 
{ 
   runnice=020; 
}
Related Topics

nice

runpaths

Description

Type list READ/WRITE

A list of permitted paths for commands. If configured, the agent rejects a command if it is not run from one of these paths, even if the command is authorized by the policy.

Example
# allow commands only from the /bin, /sbin, /usr/bin, and /usr/sbin directories 
runpaths={"/bin", "/sbin", "/usr/bin", "/usr/sbin"};

runptyflags

Description

Type string READ/WRITE

runptyflags is a modifiable copy of the ptyflags input variable. Use it to close stdin to prevent stdin on the runtime environment.

Example
if ( basename(runcommand) == "appl_home") 
{ 
   # close stdin and prevent the user from providing any input 
   # for a command that is only intended to be run in batch mode. 
   runptyflags &= | 0x1; 
}
Related Topics

ptyflags

runtimeout

Description

Type string READ/WRITE

runtimeout specifies the number of seconds of idle time allowed before the session is closed.

Example
# close the session if the user is idle for 5 minutes 
runtimeout=300;
Related Documents