Command line interface replacement for security purposes

A computerized apparatus having a processor, the processor being adapted to perform the steps of:

• obtaining a user account having an access to an Operating System (OS), wherein the OS comprises a Command Line Interface (CLI) configured to receive commands from the user and execute a predetermined functionality in the OS;
• creating an operation profile for the user account, wherein the operation profile comprises a list of authorized commands in the CLI for the user account, wherein the operation profile excludes at least one command of the CLI or at least one parameter of a command of the CLI;
• and
• deploying a CLI-Replacement Component (CRC) in the OS, wherein the CRC is associated with the user account, wherein the CRC is a CLI layer that is configured to limit executed commands in the OS based on the operation profile, whereby the CRC only sends commands adhering with the operation profile for execution by the OS.

A computer program product comprising a non-transitory computer readable storage medium retaining program instructions, which program instructions when read by a processor, cause the processor to perform a method comprising:

• obtaining a user account having an access to an Operating System (OS), wherein the OS comprises a Command Line Interface (CLI) configured to receive commands from the user and execute a predetermined functionality in the OS;
• creating an operation profile for the user account, wherein the operation profile comprises a list of authorized commands in the CLI for the user account, wherein the operation profile excludes at least one command of the CLI or at least one parameter of a command of the CLI;
• and
• deploying a CLI-Replacement Component (CRC) in the OS, wherein the CRC is associated with the user account, wherein the CRC is a CLI layer that is configured to limit executed commands in the OS based on the operation profile, whereby the CRC only sends commands adhering with the operation profile for execution by the OS.