Customer reports concerns regarding the Sudoers package required by BV Control for Unix

Article:TECH187540  |  Created: 2012-04-27  |  Updated: 2012-04-27  |  Article URL http://www.symantec.com/docs/TECH187540
Article Type
Technical Solution


Environment

Issue



When using agentless Data Collection, it is required to have installed the sudoer package as explained in this Tech Note : TECH156011


Cause



These package contains a lot of commands that could be use to make serious changes on the system. (like changing root password). Some customers might require to remove them. Symantec provide the list in the table below that can be changed.


Solution



 List of command that can be removed by platform.

Please note that the commands removed from sudoers file should be added to ExecutionContext.ini file (<RMS Install DIR>\Symantec\RMS\Control\UNIX\ConfigFiles) with ‘!’ as prefix.

Command

Linux

Solaris

HPUX

AIX

/usr/bin/passwd

Required in sudoers file.

 

This is required for users datasource “Is account locked” field.

Required in sudoers file.

 

This is required for users datasource “Is account locked” field.

Not required in sudoers file.

Not required in sudoers file.

/usr/bin/dd

Not required in sudoers file.

Not required in sudoers file.

Not required in sudoers file.

Not required in sudoers file.

/usr/bin/kmtune

Not required in sudoers file.

Not required in sudoers file.

This command is used in kernel parameters datasource but

Not required in sudoers file.

Not required in sudoers file.

/usr/bin/rm

This command is used to delete temp files created during query execution but

Not required in sudoers file.

This command is used to delete temp files created during query execution but

Not required in sudoers file.

This command is used to delete temp files created during query execution but

Not required in sudoers file.

This command is used to delete temp files created during query execution but

Not required in sudoers file.





Article URL http://www.symantec.com/docs/TECH187540


Terms of use for this information are found in Legal Notices