Type integer READONLY
The client type (pmrun or sudo) of the Privilege Manager for Unix request.
# reject if pmclient_type is "sudo"
if (pmclient_type == pmclient_type_sudo) {
reject;
} else if (pmclient_type == pmclient_type_pmrun) {
ok = true;
} Type integer READONLY
Read-only constant for pmrun type clients. You can compare pmclient_type_pmrun to pmclient_type to determine if the request was sent from a Privilege Manager for Unix client including the pmrun command, the pmshells (pmksh, pmsh, pmcsh, pmbash), and the pmshellwrapper.
# reject if pmclient_type is "sudo"
if (pmclient_type == pmclient_type_sudo) {
reject;
} else if (pmclient_type == pmclient_type_pmrun) {
ok = true;
} Type integer READONLY
Read-only constant for sudo type clients. You can compare pmclient_type_sudo to pmclient_type to determine if the request was sent from a Sudo Plugin client.
# reject if pmclient_type is "sudo"
if (pmclient_type == pmclient_type_sudo) {
reject;
} else if (pmclient_type == pmclient_type_pmrun) {
ok = true;
}Type integer READONLY
pmshell initializes to true if a Privilege Manager for Unix shell program (such as pmksh, pmsh, pmcsh, pmloginshell, and pmbash) is running; otherwise, the variable is undefined.
if (defined pmshell)
{
printf ("Now running: %s\n", pmshell_prog);
pmshell_restricted = 1;
pmshell_checkbuiltins = 1;
pmshell_reject = "You are not allowed to run this command";
pmshell_allow = {"ls","grep","cat"};
pmshell_forbid = append(pmshell_forbid, "passwd");
pmshell_forbid = append(pmshell_forbid, "kill");
}
else
{
printf("Not running a command within %s\n", pmshell_prog);
accept;
}© 2024 One Identity LLC. ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center