Tcl command extension event_reqinfo is used in the policy to query the Embedded Event Manager for
information about the detected event.
Figure 111: Embedded Event Manager Core Event Detectors
Safe-Tcl
Safe-Tcl is a safety mechanism that allows untrusted Tcl scripts to run in an interpreter that was created in
the safe mode. The safe interpreter has a restricted set of commands that prevent accessing some system
resources and harming the host and other applications. For example, it does not allow commands to access
critical Cisco IOS file system directories.
Cisco-defined scripts run in full Tcl mode, but user-defined scripts run in Safe-Tcl mode. Safe-Tcl allows
Cisco to disable or customize individual Tcl commands. For more details about Tcl commands, go to http://
www.tcl.tk/man/ .
The following list of Tcl commands are restricted with a few exceptions. Restrictions are noted against each
command or command keyword:
•
cd --Change directory is not allowed to one of the restricted Cisco directory names.
•
encoding --The commands encoding names, encoding convertfrom, and encoding convertto are
permitted. The encoding system command with no arguments is permitted, but the encoding system
command with the ?encoding? keyword is not permitted.
•
exec --Not permitted.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1767
Information About Writing Embedded Event Manager Policies Using Tcl