Implementation Guide › Installing and Customizing a UNIX Endpoint › Customizing CA ControlMinder › sesu and sepass Utilities

sesu and sepass Utilities

We recommend that you use sepass instead of the operating system's passwd command and sesu instead of the su command. To do this, you need to save the original system binaries and replace them with symbolic links to sepass and sesu respectively. Once this is done, you need to make sure you can always use these utilities.

On most operating systems, the sepass and sesu utilities run even when CA ControlMinder is not loaded. However, on some operating systems (for example, AIX) these utilities do not work when CA ControlMinder is not loaded. For these operating systems, CA ControlMinder provides wrapper scripts.