Set Paths for Command Searching in dzdo

Specify the search path for the dzdo program to use to look for commands and scripts that require privileges to run.

If you set this group policy to Not Configured or Disabled, no search path is set (that is, there is no default value). If you set this group policy to Enabled, you can specify a list of directories for the dzdo program to search for commands and scripts. The dzdo program will search in the specified directories no matter which path the command rights are configured to use in the Access Manager System search path option.

If command paths are configured in Access Manager using the System search path option and this group policy is Disabled or Not Configured, the following actions take place:

• The current user's path is used to search for the commands.

• Only the commands located under the System path are allowed to execute.

The search path that you specify can be a list of directories or the name of a file that contains the list of directories. For example, you can specify a file that contains the directories to search using the file: keyword and a file location:

file:/etc/centrifydc/customized_dzdo_directories

If you specify a file name, you should ensure that the file is owned by root and is not accessible to any other users.

This group policy modifies the dzdo.search_path setting in the agent configuration file.