Chat now with support
Chat with Support

Privilege Manager for Unix 7.2.1 - Administration Guide

Introducing Privilege Manager for Unix Planning Deployment Installation and Configuration Upgrade Privilege Manager for Unix System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager for Unix Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager for Unix Variables
Variable names Variable scope Global input variables Global output variables Global event log variables PM settings variables
Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures
Environment functions Hash table functions Input and output functions LDAP functions LDAP API example List functions Miscellaneous functions Password functions Remote access functions String functions User information functions Authentication Services functions
Privilege Manager for Unix programs Installation Packages

getyesnosetting

Syntax
boolean getyesnosetting ( string <variable_name>)
Description

getyesnosetting returns the value of a yes/no setting in the current policy server host settings file. If the named config is not present in the policy server host setting file, it returns false.

Example
if (getyesnosetting("sysLogQueue") == false ) { 
   reject; 
}

keepenv

Syntax
keepenv( string env1 [, string env2, …] )
Description

The keepenv procedure modifies the runenv variable to keep only those environment variables whose names are specified. All others are deleted from the runtime environment. This is used to constrain which environment variables a user may keep when running programs through Privilege Manager for Unix or Safeguard for Sudo when using the pmpolicy style policy.

Example
# reset the environment to the minimum 
keepenv("PATH", "TERM", “HOME”, “USER”); 
Related Topics

setenv

unsetenv

policygetenv

Syntax
string policygetenv ( string name [, string value] )
Description

policygetenv returns the value of the specified environment variable from the policy server.

Example
# print the value of HOME if defined, otherwise print "none" 
print(policygetenv("HOME", "none"));
Related Topics

keepenv

setenv

 

policysetenv

Syntax
policysetenv ( string variable, string value )
Description

The policysetenv procedure sets one or more environment variables in the policy server.

Example
#set the shell variable 
policysetenv("SHELL", "/opt/quest/bin/pmsh");
Related Topics

keepenv

unsetenv

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating