Class Activation
Describes how PAM SC passes a list of active classes to SEOS_syscall, so that it does not have to constantly intercept these classes.
capamsc141
Privileged Access Manager
stores information about whether a CLASS is active or inactive in the database. When Privileged Access Manager
starts, it passes a list of active classes to SEOS_syscall, so Privileged Access Manager
does not have to constantly intercept these classes. The only time Privileged Access Manager
intercepts a class is when a user changes the activity status of a class. If a class is inactive, access to the resource is not intercepted.You can use the inactive class bypass with the following classes: FILE, HOST, TCP, CONNECT, and PROCESS.