Is it possible to register wildcard when setting program ACL?

Products

• CA Privileged Identity Management Endpoint (PIM)

Issue/Introduction

Is it possible to register wildcard when setting program ACL through via(pgm()) when defining file policy?

ex: 

PAMSC> nr file /testdir/test.txt owner(nobody) defacc(n) warning
PAMSC> auth file /testdir/test.txt uid(root) via(pgm(/opt/CA/PAMSC/bin/*)) acc(all)

Environment

PAM SERVER CONTROL 14.x

Resolution

Yes, it's possible to use a Wildcard when defining access using via(pgm(/path_to_executable/*))

For this to work properly, make sure that the executables under the specified path_to_excutable don't have any restrictions at the OS level for the specified user nor are these executables being denied access in the PAMSC itself.

Additional Information

It is not advised to use the wildcard on general directories such as /bin or /usr/bin. The directory used in the PACL should also be protected by a PAMSC rule in order to be more secure.