securecmd

# List of the allowed cbsd commands
SECCMD="\
apply \
attachgeli \
attachzfs \
bases \
baseupdate \
bcheckpoint \
bchroot \
bcleanup \
bclone \
bconfig \
bconstruct-tui \
bcontrol-tui \
bcreate \
bdescr \
bdestroy \
bexec \
bget \
bhyve-controller \
bhyve-controller-list \
bhyve-controller-tui \
bhyve-dsk \
bhyve-dsk-list \
bhyve-dsk-tui \
bhyve-exist \
bhyve-nic \
bhyve-nic-list \
bhyve-nic-tui \
bhyve-nvme \
bhyve-nvme-list \
bhyve-nvme-tui \
bhyve-p9shares \
bhyve-ppt \
bhyvecfg-passhtu-tui \
bjail \
blogin \
bls \
bmigrate \
bootmgmt \
bootmgmt-pxe \
border \
border-tui \
bpause \
bpcibus \
brctl-tui \
brename \
brenice \
brestart \
bscp \
bset \
bsetup-tui \
bstart \
bstop \
bswmode \
buildkernel \
buildworld \
carpcfg \
carpcontrol \
cbsdchown \
cbsdd \
check_for_empty_hdd \
checkip \
checkrhost \
copy-binlib \
cpu-topology \
cpuset \
delete-old-libs \
destroy \
detachzfs \
dhcpd \
dhcpdv6 \
disks-list \
disks-list \
distccmakeconf \
distribution \
etcupdate \
expose \
fetch_iso \
forms \
freectr \
freejname \
fwcounters \
geli \
get-next-ng-port \
get-next-tcp-port \
get-next-vale-port \
get-profiles \
getinfo \
getip-by-nics \
getnics-by-ip \
help \
history \
images \
imghelper-tui \
imgpart \
imgpart2 \
imgremove \
imgtype \
initenv \
initenv-tui \
installkernel \
installworld \
install-pkg-world \
iscsi-discovery \
j2prepare \
j2slave \
jail2iso \
jailmapdb \
jailnic-tui \
jbackup \
jcleanup \
jclone \
jcoldmigrate \
jconfig \
jconstruct \
jconstruct-tui \
jcontrol-tui \
jcreate \
jdescr \
jdestroy \
jexec \
jexport \
jgensecrets \
jget \
jimport \
jlogin \
jls \
jmkrcconf \
jmkrctlconf \
jorder \
jorder-tui \
jpause \
jrclone \
jrctl \
jrctl-tui \
jregister \
jrename \
jrenice \
jrestart \
jrsyncconf \
jscp \
jset \
jsetup-tui \
jsnapshot \
jstart \
jstatus \
jstop \
jswmode \
junregister \
jupgrade \
jwhereis \
kernels \
make_tmp_helper \
makejconf \
makeresolv \
makescene \
media \
merge \
mkdatadir \
mkdistribution \
mkinventory \
mkjhosts \
module \
mountfstab \
mountmd \
natcfg \
natcfg-tui \
natoff \
naton \
ndescr \
netinv \
nexttask \
nics-list \
nlogin \
node \
nodeaddkey \
nodescp \
objls \
packages \
path2jail \
pkgbrowsecat \
pkgbrowser \
portsup \
preparebase \
qconstruct-tui \
qexec \
qlogin \
rctlcounters \
register_base \
register_kernel \
register_source \
removebase \
removekernel \
removeobj \
removesrc \
replacewdir \
repo \
repo-tui \
retrinv \
rexe \
rsyncdoff \
rsyncdon \
secretsfile \
show_profile_list \
sockstat \
sources \
sqlrep \
srcpatch \
srcup \
srvbrowser-tui \
sshkey \
summary \
sysinv \
task \
taskls \
trafstat \
unmountfstab \
unmountmd \
unregister_base \
unregister_kernel \
up \
upgrade \
valecfg \
valecfg-tui \
vconfig \
vconstruct-tui \
vcontrol-tui \
vcreate \
vhidcfg \
vhidcfg-tui \
vls \
vm-cpu-topology \
vm-cpu-topology-tui \
vm-packages \
vm-packages-tui \
vpc \
vremove \
vset \
vsetup-tui \
vstart \
vstop \
xcheckpoint \
xconfig \
xconstruct-tui \
xcreate \
xdestroy \
xen-dsk \
xen-dsk-list \
xen-dsk-tui \
xen-exist \
xget \
xlogin \
xls \
xmigrate \
xorder \
xset \
xsetup-tui \
xstart \
xstop \
zfs-migrator
"