Restricted command lines

Restricted commands are defined with rcmdl_xxxx options. These commands can be expressed in complete command line or in regular expression. When actim server receives a command line request, first it will check all the current configurations and see whether it has any restrictions in running command lines. If so, then it will perform a regular expression match on each rcmdl_xxxx value to see whether the incoming command is allowed.

However, care must be taken when defining the rcmdl_option. Here are some brief guidelines:

• Instead of defining a complete command line, eg. 'ps -efl', users should define as rcmdl_psAll=$\wedge$ps -efl$ instead.
• When expressing command lines in regular expression syntax, users should disallow any multiple command characters, such as ';' and '$\vert$', unless it is necessary. For example, instead of putting rcmdl_listCVS=ls -l /home/cvs/*, users should do rcmd_listCVS=$\wedge$ls -l /home/cvs/$[\backslash$w/$]$*$ instead.

  The rcmdl_xxxx option also has another feature. The name after rcmd_ prefix can act as a command id. With the above example, users can call the command id remotely with -i option. For example,

  actim -E -i listCVS -d e.xom@ntlworld.com.