Bay Networks 5390 Administering page 503

Communications server

Hide thumbs Also See for 5390:

Table of Contents

If the user enters the masked command, the CLI displays an error message. The superuser CLI

commands cannot be masked individually. They can all be disabled by masking the su command.

You can disable several other CLI commands in the same way:

define bit to disable each maskable CLI command*/

#define MASK_BG0x00000001

#define MASK_CALL0x00000002

#define MASK_FG0x00000004

#define MASK_HANGUP0x00000008

#define MASK_HELP0x00000010

#define MASK_HOSTS0x00000020

#define MASK_JOBS0x00000040

#define MASK_KILL0x00000080

#define MASK_NETSTAT0x00000100

#define MASK_RLOGIN0x00000200

#define MASK_STATS0x00000400

#define MASK_STTY0x00000800

#define MASK_TELNET0x00001000

#define MASK_WHO0x00002000

#define MASK_LOCK0x00004000

#define MASK_SU0x00008000

#define MASK_SLIP0x00010000

#define MASK_CONNECT0x00020000

#define MASK_SERVICES0x00040000

#define MASK_PPP0x00080000

#define MASK_ARAP0x00100000

#define MASK_NONE0x80000000

NOTE: Superuser CLI mode overrides ACP command masking.

NOTE: After changing the code, cd to the /src directory and recompile

erpcd. For more speciﬁc command disabling, for example, by user

name, you must edit the distribution policy ﬁle /annex_root/src/erpcd/

acp_policy.c.

Using Model 5390 Security