PMUL Policy Scripts: ACA

Hi everyone,

I’m trying to use aca to block some commands after user switch to a root account using pbrun. But I’m not able to achieve it, below is the sample script I have. Please suggest the changes to effectively use aca to block commands.

bash is an alias command to switch to root user. I can still run whoami command after switch to root.

if (command == bash){

aca("file", "/use/bin/whoami", "!all", "BLOCK");
accept;

}

Thanks,