Minimum sudo rights for running the DC server

book

Article ID: 207866

calendar_today

Updated On:

Products

DX NetOps

Issue/Introduction

Due to internal security requirements, we need to keep the minimum workable rights in the sudoers file post install.

 

Cause

The docset only includes the sudo rights needed for a full install as well as long term management.

Environment

Release : 20.2

Component : PERFORMANCE MANAGEMENT INSTALLATIONS/UPGRADES

Resolution

Here is the minimum workable entry for post install:

Cmnd_Alias CA_DATACOLL =  /sbin/service dcmd *, /sbin/service/activemq *,/opt/IMDataCollector/RemoteEngineer/re.sh, /opt/IMDataCollector/scripts/dcmd

## Allows the <caimdc> user to manage the <caimdc>

Sudouser  ALL = CA_DATACOLL

Additional Information

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/performance-management/20-2/installing/prepare-to-install-the-data-collectors.html#concept.dita_76d8acd3fcfbcfdd91adec0e1b5635cad44c40fc_OptionalConfiguretheSudoUserAccountforDataCollector