How to control applications from the command line

Overview

The command line tool "VISULOX policy application" allows to control the Application Policy.

Usage

The following subcommands are available:

Command	Description
list	List and print Application Policies.
add	Add an Application Policy.
edit	Modify fields of an Application Policy.
delete	Remove an Application Policy.
fields	List available fields in the database (-raw = enhanced output)

Application Policy elements (edit)

Element	Description
-name <>	Name of policy or use AUTO
-mode <>	Policy on or off. Default value: on.
-object <>	Policy filter: mask or unique distinguished object of user or group <>
-applicationgroup <>	Policy filter: mask or applicationgroup name or applicationgroup mask <>
-application <>	Policy filter: mask or application name or application mask <>
-remoteip <>	Policy filter: remote IP or remote IP mask <>
-accesspoint <>	Policy filter: Access Point <>
-script <>	Trigger script. Usage: -script "<script-name>: args". Example with arguments: -script "Dump: -arg arg -arg1 <>"
-recording <>	Mandatory. In comparison to the GUI no field validation is done.
-lifetime <>	Lifetime of recorder data <>
-welcome <>	Recording welcome message <>
-ksmode <>	KW mode: off / detect / record. Default value: off
-ksscript <>	Trigger script on detection <>
-ksaction <>	Action on detection: mute / info / lock. Default value: mute
-ksmessage <>	Message to user on detection <>
-ksrules <>	File with keystroke rules <> Template for a ksrules file ksmode= on ksexpr=\ybadcommand\y\|\ybadword\y comment=This is badcommand or badword
-ocrmode <>	OCR mode off / detect / record. Default value: off.
-ocrargs <>	OCR API arguments <>
-dcmode <>	Dual Control on or off. Default value: off.
-dcmembers <>	Dual Control members. Default value: 1.
-dctimer <>	Dual Control timer. Default value: 30.
-dcobject <>	Dual Control filter: mask or unique distinguished object of user or group <>
-dcremoteip <>	Dual Control filter: mask or remote IP or remote IP mask <>
-dcaccesspoint <>	Dual Control filter: Access Point <>
-comment <>	Comment for the policy. Default value: CLI.
-grant <>	Set granted user in database record <>

Examples

List current available Application Policies

CODE

visulox policy application list
    --------------------------
    | basicname | policymode |
    --------------------------
    |      APP1 | active.map |
    --------------------------

List available fields

CODE

visulox policy application fields

List selected fields

CODE

visulox policy application list -fields basicname,policymode,app_script

Add new Application Policy

CODE

visulox policy application add -name APP1 -application "xterm\,xclock" -recording on

Edit Application Policy

CODE

visulox policy application edit -name APP1 -lifetime 3

Edit Application Policy

CODE

visulox policy application edit -name APP1 -ksmode record -ksrules /tmp/ks_rules -ksscript Dump

Remove an entry

CODE

visulox policy application delete -name APP1