Bay Networks 6300, Инструкция к добавке

Страница: 362 / 593

Remote Annex 6300 Supplement to the Remote Annex Administrator’s Guide for UNIX
Chapter 15 Using RA 6300 Security
A-334
Book A
To disable the CLI who and su commands for all users that enter the
system through ACP security, modify the definition line to read:
#define CLI_MASK (unsigned long) (MASK_WHO | MASK_SU)
You can extend this to any set of commands by adding masks to that line
separated by the vertical bar (|).
If the user enters the masked command, the CLI displays an error
message. The superuser CLI commands cannot be masked individually.
They can all be disabled by masking the su command.
Superuser CLI mode overrides ACP command masking.
You can disable several other CLI commands in the same way:
/* define bit to disable each maskable CLI command*/
#define MASK_BG 0x00000001
#define MASK_CALL 0x00000002
#define MASK_FG 0x00000004
#define MASK_HANGUP 0x00000008
#define MASK_HELP 0x00000010
#define MASK_HOSTS 0x00000020
#define MASK_JOBS 0x00000040
#define MASK_KILL 0x00000080
#define MASK_NETSTAT 0x00000100
#define MASK_RLOGIN 0x00000200
#define MASK_STATS 0x00000400
#define MASK_STTY 0x00000800
#define MASK_TELNET 0x00001000
#define MASK_WHO 0x00002000
#define MASK_LOCK 0x00004000
#define MASK_SU 0x00008000
#define MASK_SLIP 0x00010000
#define MASK_CONNECT 0x00020000
#define MASK_SERVICES 0x00040000
(continued on next page)