Specify whether to enforce the validation check for
dzdo privileged commands.
If you set this group policy to Enabled, privileged commands will run only after being validated by the
dzdo validator. If a command fails validation, or if the
dzdo validator does not exist, is not available, or is not trusted—for example because it is not owned by root or is group or world writeable—the command will not run.
If you set this group policy to Not configured or Disabled, no attempt is made to validate privileged commands, and the commands will run without validation.
This group policy modifies the
dzdo.validator.required setting in the agent configuration file.
dzdo validator is located and configured as described in Set dzdo validator later in this section.