立即与支持人员聊天
与支持团队交流

Safeguard for Sudo 7.2.2 - Administration Guide

Introducing Safeguard for Sudo Planning Deployment Installation and Configuration Upgrade Safeguard for Sudo System Administration Managing Security Policy Administering Log and Keystroke Files Supported sudo plugins Troubleshooting Safeguard Variables Safeguard programs Installation Packages Supported Sudoers directives Unsupported Sudo Options Safeguard for Sudo Policy Evaluation

pmgit Set

This subcommand sets or updates setting in the pm.settings file.

--git-url

Alias

-g

Type

string

Value

<git-policy-repository-url>

Default

N/A

Description: Sets the URL of the Git policy repository. This argument can be set when the Git policy management is disabled.

Syntax

--git-url <git-policy-repository-url>
--branch

Alias

-b

Type:

string

Values:

<branch-of-policy-files>

Default:

master

Description: Sets the Git branch where the policy files are stored.

Syntax

--branch <branch-of-policy-files>
--update-interval

Alias

-u

Type:

integer

Values:

0-60 (minutes)

Default:

5 (minutes)

Description: Sets the synchronization interval between Git and SVN. This value must be in the [0-60] minutes interval. If this argument is set to 0, periodic updates will be turned off.

Syntax

--update-interval <[0-60]>
--alert-script

Alias

-a

Type:

string

Values:

<path-to-script>

Default:

N/A

Description: Sets the path to a user-defined script which is run when the synchronization from Git to SVN fails due to syntax errors.

Syntax

--alert-script <path-to-script>
Examples

In this example, the name of the branch is set to production and the path to the alert script is set to /path/to/script.

pmgit set -b production -a /path/to/script

pmgit Status

This subcommand displays information about the policy management settings.

Examples

This example shows how to display the current status of the Git policy management settings.

pmgit status

pmgit Help

This subcommand displays on-screen help. If another subcommand is given as an argument, help for that subcommand will be displayed.

Syntax

help <subcommand>
Examples

In this example, the general help section will be displayed.

pmgit help
Examples

In this example, the help for enable subcommand will be displayed.

pmgit help enable
enable

pmjoin_plugin

Syntax

pmjoin_plugin -h | --help [-abioqv] 
                [-d <variable>=<value>] [<policy_server_host>] [-bv] -u
                [--accept] [--batch] [--define <variable>=<value>] [--interactive] 
                [--io-plugin-only][--pipestdin][--verbose] <policy_server_host> ... 
                [--batch] [--verbose] -unjoin -N policy_name [--policyname policy_name]

Description

Run the pmjoin_plugin command after installing the Sudo Plugin package (qpm-plugin) on a remote host to allow it to communicate with the servers in the policy group.

Options

pmjoin_plugin has the following options.

Table 17: Options: pmjoin_plugin
Option Description
-a | --accept Accepts the End User License Agreement (EULA), /opt/quest/qpm4u/pqm4u_eula.txt.
-b | --batch Runss in batch mode, does not use colors or require user input.
-d <variable>=<value> | --define <variable>=<value> Specifies a variable for the pm.settings file and its associated value.
-h | --help Displays usage information.
-i | --interactive Runs in interactive mode, prompting for configuration parameters instead of using the default values.
-o | --io-plugin-only Configures only the I/O logging plugin (io_plugin) without the use of the Sudo Plugin (policy_plugin) .
-q | --pipestdin Pipes password to stdin if password is required.
-u | --unjoin Unjoins a Sudo Plugin host from the policy server.

-N policy_name | --policyname policy_name

Use policy_name as the name of the policy instead of the default. This option is used to specify the name of the policy that the server should use when making policy decisions.

-v | --verbose

Displays verbose output while configuring the host.

Files
  • Directory when pmjoin_plugin logs are stored: /opt/quest/qpm4u/install
  • Sudo Plugin configuration file: /etc/sudo.conf
Related Topics

pmmasterd

pmsrvconfig

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级