runcksum

Data Type

String, modifiable

Description

The runcksum variable stores a checksum value. By default, runcksum is an empty string. Populate it by running the Endpoint Privilege Management for Unix and Linux utility program pbsum, which generates application and file checksum values.

Use checksum values to determine if a file or application has changed by establishing a baseline checksum and then comparing that baseline checksum against a checksum that is generated during security policy file processing. If the checksum values are different, then the file or application has changed since generation of the baseline checksum, and Endpoint Privilege Management for Unix and Linux will refuse to run it.

Application checksum values can be used to determine if a virus has infected an application or if the file has been changed.

There is no read-only version of this variable.

This run variable does not apply to pbssh. If it is present in the policy, it does not have any effect on pbssh and is ignored.

Syntax

runcksum = string;

Valid Values

A string that contains a checksum value that is generated by pbsum. The default value is empty, which specifies no checksum checking.

runcksum = "2f9777ff";