Class Activation

Describes how PAM SC  passes a list of active classes to SEOS_syscall, so that it does not have to constantly intercept these classes.
capamsc141
Privileged Access Manager
stores information about whether a CLASS is active or inactive in the database. When
Privileged Access Manager
starts, it passes a list of active classes to SEOS_syscall, so
Privileged Access Manager
does not have to constantly intercept these classes. The only time
Privileged Access Manager
intercepts a class is when a user changes the activity status of a class. If a class is inactive, access to the resource is not intercepted.
You can use the inactive class bypass with the following classes: FILE, HOST, TCP, CONNECT, and PROCESS.