shellrestricted

  • Version 3.5 and earlier: shellrestricted variable not available.
  • Version 4.0 and later: shellrestricted variable available.

Data Type

Boolean

Description

Controls whether Endpoint Privilege Management for Unix and Linux shells run in restricted mode. Restricted mode has the following limitations:

  • The cd command is disabled.
  • The environment variables SHELL, ENV, and PATH are read-only.
  • Command names cannot use absolute or relative paths.
  • The -p option of the built-in command is disabled.
  • I/O redirections (>, >|, >>, and <>) that create files are disabled.

Syntax

shellrestricted = boolean;

Valid Values

true Runs Endpoint Privilege Management for Unix and Linux shells in restricted mode.
false Disables restricted mode. The default is false.
shellrestricted = true;