Set environment variables to be removed by dzdo with characters % or /

Specify the list of environment variables that should be checked for percent (%) or slash (/) special characters If there are environment variable values containing the special characters, dzdo removes those variables from the user’s environment. Variables with % or / characters are removed regardless of whether you have selected the Reset environment variables option for the command in Access Manager.

If you set this group policy to Not configured or Disabled, the default list of variables displayed when you run the dzdo -V command as root is checked for special characters.

If you set this group policy to Enabled, you can specify variables to check for special characters in addition to the default list of variables. Variables that you specify must be formatted as a comma-separated list. For example:


This group policy provides functionality equivalent to setting the env_reset flag for configuring sudo operation.

This group policy modifies the dzdo.env_check setting in the agent configuration file.