6.4.6 Executable command definition file (apmremotecmd.conf)

Define information used to restrict execution of remote commands, other than specific ones. The defined restrictions also apply to the execution of remote commands by automated actions. After modifying this file, perform either of the following tasks:

Execute the apmchg command with the -r option to reload the file.
Restart APM.

Organization of this subsection

(1) Format
(2) Description
(3) Example
(4) Definition rules

(1) Format

The following is the format of the executable command definition file.

[Figure]

To Page Top

(2) Description

Key name	Value
`LIMITMODE` <<`OFF`>>((`ON`/`OFF`))	Specify whether to restrict execution of remote commands, other than the one specified in `command-name`.
`Command-name`	Specify the name of a command that can be executed as a remote command. Note that setting `LIMITMODE` to `OFF` allows the execution of all remote commands, regardless of the specification of `command-name`.

Key name

Value

LIMITMODE

<<OFF>>((ON/OFF))

Specify whether to restrict execution of remote commands, other than the one specified in command-name.

Command-name

Specify the name of a command that can be executed as a remote command. Note that setting LIMITMODE to OFF allows the execution of all remote commands, regardless of the specification of command-name.

To Page Top

(3) Example

The following shows an example of an executable command definition file.

[Figure]

To Page Top

(4) Definition rules

Any single-byte spaces and tabs before or after a definition will be ignored.
If a command is specified with its full path, remote execution of the command is allowed only when the full path of the command is specified on SSO. On the contrary, if a command name (including its file extension) is specified, remote execution of the command is allowed only when the command name is specified on SSO.
A command specified with one or more options is regarded as a command name and does not result in an error.
Specify only a single command on each line.
Define a command name by using the same command name specified on SSO, including the file extension.
If a command is specified without its path, remote execution of the command is allowed only when the command is specified without its path on SSO.
If a remote command specified on SSO contains any single quotation marks ('), double quotation marks ("), or escape characters, include them in the executable command definition file in the same way as they are used in the remote command specification on SSO.
The Windows system does not distinguish between upper- and lower-case characters.

To Page Top