An error message "special value [Blocked File]" Or "Access denied" on UNIX\Linux servers in CCS

Products

• Control Compliance Suite
• Control Compliance Suite Standards Server

Issue/Introduction

Control Compliance Suite (CCS)

An error message "special value [Blocked File]" appears
Or you see an "Access denied" message

Can occur in both agent based and agentless CCS 12.x data collection jobs.

 

Environment

CCS 12.x agentless scans and agent based scans.

Cause

By default CCS will block and not bring back information on the /etc/passwd and the /etc/shadow files on UNIX\Linux servers.

Resolution

For Agentless data collection:

1. On every CCS Manager in your environment, manually edit the file "C:\Program Files (x86)\Symantec\CCS\Reporting and Analytics\DPS\control\Unix\ConfigFiles\SecuredFiles.dat" 
   1. Place a hash mark "#" at the beginning of each line as follows:
      1. #/etc/passwd
      2. #/etc/shadow
   2. Restart the 'Symantec CCS Manager' services for the new configuration to take effect.

 

For Agent based data collection:

1. Manually edit the file "/esm/bin/dcmodules/<platform e.g. Linux>/UNIX/SecuredFilesList.dat" file and place a hash mark "#" at the beginning of each line as follows:
   1. #/etc/passwd
   2. #/etc/shadow
2. Restart the CCS agent daemons for the change in the configuration to take effect. (i.e. /esm/esmrc restart)