立即与支持人员聊天
与支持团队交流

Safeguard for Sudo 7.1.1 - Administration Guide

Introducing Safeguard for Sudo Planning Deployment Installation and Configuration Upgrade Safeguard for Sudo System Administration Managing Security Policy Administering Log and Keystroke Files Troubleshooting Safeguard Variables Safeguard programs Installation Packages Unsupported Sudo Options Safeguard for Sudo Policy Evaluation

pmshell_checkbuiltins

Description

Type integer READ/WRITE

If pmshell_checkbuiltins is set to true, the Privilege Manager for Unix shell program will check all shell builtin commands as if they were not built-ins. That is, it will match each one against the forbidden list, then the allowed list, and if no match is found, then the command will be authorized with pmmasterd. To see a full list of the builtin commands for a particular shell program, run the shell program with the -? option. The default value for this variable is false.

This variable is applicable to the pmsh, pmksh, and pmcsh programs.

Example
if (defined pmshell_cmd){ 
   if (user !in safe_shell_list) 
   { 
      #check builtins 
      pmshell_checkbuiltins=true; 
   } 
}
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级