• Version 3.5 and earlier: shellallowedcommands variable not available.
  • Version 4.0 and later: shellallowedcommands variable available.


This variable contains a list of strings that contain commands that may be run without any further authorization. Each element of the list can contain either a command basename or absolute path. Shell template characters can be used at any point. This variable is used by pbsh and pbksh at startup time.

shellallowedcommands = list;

A list of strings containing commands.

if (pbclientmode == "shell start")
shellallowedcommands = {"date", "/bin/df", "/usr/local/bin/*"};