Previous Topic: Configure an Endpoint for Policy Deviation Calculations

Next Topic: sesu and sepass Wrapper Scripts

sesu and sepass Utilities

We recommend that you use sepass instead of the operating system's passwd command and sesu instead of the su command. To do this, you need to save the original system binaries and replace them with symbolic links to sepass and sesu respectively. Once this is done, you need to make sure you can always use these utilities.

On most operating systems, the sepass and sesu utilities run even when CA Access Control is not loaded. However, on some operating systems (for example, AIX) these utilities do not work when CA Access Control is not loaded. For these operating systems, CA Access Control provides wrapper scripts.