dzdo.env_check

This configuration parameter specifies the list of environment variables that the dzdo process should check for the special characters, % or /, in the value. If the dzdo process finds environment variable values containing the special characters, it removes those variables from the user’s environment. Variables with % or / characters are removed regardless of whether you have selected the Reset environment variables option for the command in Access Manager.

The default list of variables to check is displayed when you run dzdo -V command as root. You can customize the list by modifying this configuration parameter in the centrifydc.conf file.

The parameter value can be a comma-separated list of environment variable names.

For example:

dzdo.env_check: COLORTERM,LANG,LANGUAGE,LC_*,LINGUAS,TERM

This configuration parameter provides functionality equivalent to the env_reset flag for configuring the sudoers file and sudo operation.

You can also set this parameter using group policy.