PAM Configuration and Management Manual

Introduction
PAM Configuration and Management Manual—523349-003
2-11
Management Commands
Sensitive and Nonsensitive Commands
Commands are divided into two groups: sensitive and nonsensitive. A command is
classified as either sensitive or nonsensitive based on its impact on the subsystem and
on whether a user must have proper security to use it.
Sensitive commands are used to add or delete objects, start or stop objects, alter
object attributes, reset statistics counters, or perform some other function that can
have a significant impact on the status or operation of an object. The only users
allowed to issue sensitive commands are members of the super group (group ID 255),
the owner of the subsystem, or a member of the group of the owner of the subsystem.
The sensitive commands are:
•
ABORT
•
ADD
•
ALTER
•
DELETE
•
PRIMARY
•
START
•
STATISTICS, RESET
•
STOP
•
TRACE
The nonsensitive commands are:
•
INFO
•
NAMES
Table 2-1. PAM Management Commands
Command Action
ABORT Abruptly stops the operation of an object.
ADD Defines an object to the subsystem.
ALTER Changes the values of an object’s attributes.
DELETE Removes an object definition from the subsystem.
INFO Returns an object’s current attribute values.
LISTOPENS Returns the process IDs of an object’s openers.
NAMES Returns the fully qualified names specified by the object.
PRIMARY Alternates the primary and backup processor for the specified object.
START Starts the operation of an object.
STATISTICS Returns an object’s current statistics without resetting the counters.
STATUS Returns the current status of an object
STOP Stops the operation of an object.
TRACE Initiates, modifies, or terminates trace mode for an object.
VERSION Returns an object’s version information.