Chat now with support
Chat with Support

Safeguard for Sudo 2.0 - Administrators Guide

One Identity Privileged Access Suite for Unix Introducing Privilege Manager for Unix Introducing Privilege Manager for Sudo Planning Deployment Installation and Configuration
Download Privilege Manager for Unix Software Packages Download Privilege Manager for Sudo Software Packages Quick Start and Evaluation Configure a Primary Policy Server Configure a Secondary Policy Server Install PM Agent or Sudo Plugin on a Remote Host Remove Configurations
Upgrading Privilege Manager System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager Variables Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures Privilege Manager Programs Installation Packages Unsupported Sudo Options Sudo Plugin Policy Evaluation About us

runuser

Privilege Manager Variables > Global Output Variables > runuser
Description

Type string READ/WRITE

runuser is a modifiable copy of the user input variable. Specifies the user name that pmlocald uses when initializing the runtime environment for the runcommand.

Example
if ( (user == "apache") && (command == "admin.cgi") ) 
{ 
   runuser="root"; 
}
Related Topics

user

runutmpuser

Privilege Manager Variables > Global Output Variables > runutmpuser
Description

Type string READ/WRITE

runutmpuser specifies the login name of the user that will be used when updating the UNIX® utmp and wtmp files when the request is executed.

Example
if ( user == "djv" ) 
{ 
   runutmpuser="dave"; 
}

subprocuser

Privilege Manager Variables > Global Output Variables > subprocuser
Description

Type string READ/WRITE

subprocuser is the user name used to run any subprocesses of pmmasterd such as, when running the system function. The default value is "root".

Example
subprocuser="appl_user"; 
cfile=system("find /home/applhome –name customprofile.txt"); 
if (status == 0) 
{ 
   print(readfile(cfile)); 
}

tmplogdir

Privilege Manager Variables > Global Output Variables > tmplogdir
Description

Type integer READ/WRITE

tmplogdir is the directory used for temporary storage of I/O log files if a remote log host is specified in iologhost. The default value is /opt/quest/qpm4u/iologs/queue.

Example
iologhost="sol34.test.com"; 
tmplogdir="/var/iologs/queue"; 
   iolog = mktemp("/var/adm/pm.enc."+user+"."+command+".XXXXXX"); 
}
Related Topics

iolog

iologhost

iolog_opmax

iolog_errmax

iolog_encrypt

log_passwords

Related Documents