PAM Configuration and Management Manual

SCF for PAM
PAM Configuration and Management Manual—523349-003
3-2
Sensitive and Nonsensitive Commands
Sensitive and Nonsensitive Commands
Some SCF commands are sensitive, meaning that they can have detrimental effects if
improperly used, so special qualification is required to use them. Sensitive commands
can change the state or configuration of subsystem objects, start or stop tracing, or
change the values of statistics counters. The use of sensitive commands is limited to
these user IDs:
•
Members of the super ID (group ID 255)
•
Members of the user group that owns the process to which the command is sent
Other SCF commands are nonsensitive, meaning that they request information or
status but do not affect operation and are therefore available to all users. Table 3-2 lists
the sensitive and nonsensitive SCF commands for the PAM subsystem.
STOP Command on
page 3-56
XX X X
TRACE Command
on
page 3-60
X
VERSION Command
on page 3-63
XX
Table 3-2. Sensitive and Nonsensitive PAM SCF Commands
Sensitive Commands Nonsensitive Commands
ABORT INFO
ADD NAMES
ALTER LISTOPENS
DELETE STATS
PRIMARY STATUS
STATS, RESET VERSION
START
STOP
TRACE
Table 3-1. SCF Commands and Objects (page 2 of 2)
Command Objects
LINE MSAP null PORT PROCESS SESSION