PAM Management Programming Manual

Introduction
PAM Management Programming Manual—142481
1-11
Management Commands
Sensitive and Nonsensitive Commands
Commands are divided into two groups: sensitive and nonsensitive. A command is
classified as either sensitive or nonsensitive based on its impact on the subsystem and on
whether a user must have proper security to use it.
Sensitive commands are used to add or delete objects, start or stop objects, alter object
attributes, reset statistics counters, or perform some other function that can have a
significant impact on the status or operation of an object. The only users allowed to
issue sensitive commands are members of the super group (group ID 255), the owner of
the subsystem, or a member of the group of the owner of the subsystem
The sensitive commands are
•
ABORT
•
ADD
•
ALTER
•
DELETE
•
PRIMARY
•
START
•
STATISTICS, RESET
•
STOP
•
TRACE
The nonsensitive commands are:
•
INFO
•
NAMES
Table 1-1. PAM Management Commands
Command Action
ABORT Abruptly stops the operation of an object.
ADD Defines an object to the subsystem.
ALTER Changes the values of an object’s attributes.
DELETE Removes an object definition from the subsystem.
INFO Returns an object’s current attribute values.
LISTOPENS Returns the process IDs of an object’s openers.
NAMES Returns the fully-qualified names specified by the object.
PRIMARY Alternates the primary and backup processor for the specified object.
START Starts the operation of an object.
STATISTICS Returns an object’s current statistics without resetting the counters.
STATUS Returns the current status of an object
STOP Stops the operation of an object.
TRACE Initiates, modifies, or terminates trace mode for an object.
VERSION Returns an object’s version information.