EDR: Upgrade fails with the message "sudo has been configured to not allow root to run it"

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

After running the "/usr/share/cb/cbupgrade" utility, it fails with an error stating "Sorry, sudo has been configured to not allow root to run it." 

--------------------------------------------------------------------------------

SQL DB - START

--------------------------------------------------------------------------------

Sorry, sudo has been configured to not allow root to run it.

--------------------------------------------------------------------------------

UPGRADE ABORTED

--------------------------------------------------------------------------------

'sudo -u cb /usr/pgsql-9.3/bin/pg_ctl start -w -l /var/log/cb/pgsql/setup.log -D /cbvol/cb/data/pgsql -o "-p 5002"' execution failed(1)

Traceback (most recent call last):

File "/opt/jenkins/builds/workspace/build-cbent-release-5.1/code/coreservices/src/cb/utils/exceptions.py", line 57, in decorator

File "/usr/lib/python2.6/site-packages/cb/maintenance/cbupgrade/main.py", line 189, in main

File "/usr/lib/python2.6/site-packages/cb/maintenance/cbupgrade/main.py", line 69, in run

File "/usr/lib/python2.6/site-packages/cb/maintenance/cbupgrade/main.py", line 123, in __execute_actions

File "/usr/lib/python2.6/site-packages/cb/maintenance/cbupgrade/main.py", line 117, in run_actions

File "/opt/jenkins/builds/workspace/build-cbent-release-5.1/code/coreservices/src/cb/maintenance/cbupgrade/base_action.py", line 64, in do_execute

File "/opt/jenkins/builds/workspace/build-cbent-release-5.1/code/coreservices/src/cb/utils/cb_shell.py", line 45, in decorator

File "/usr/lib/python2.6/site-packages/cb/maintenance/cbupgrade/common_actions/pgsql_runner.py", line 23, in execute

File "/opt/jenkins/builds/workspace/build-cbent-release-5.1/code/coreservices/src/cb/maintenance/cbupgrade/base_action.py", line 79, in run_shell

File "/opt/jenkins/builds/workspace/build-cbent-release-5.1/code/coreservices/src/cb/utils/cb_shell.py", line 34, in run

CbShellException: 'sudo -u cb /usr/pgsql-9.3/bin/pg_ctl start -w -l /var/log/cb/pgsql/setup.log -D /cbvol/cb/data/pgsql -o "-p 5002"' execution failed(1)

 

 

Environment

• EDR (Formerly CB Response) Server: All Supported Versions

Cause

The root user is not allowed to run the sudo command, because it is not present in the /etc/sudoers file. 

Resolution

In order to run the cbupgrade utility, the root user must be able to run the sudo command.

Additional Information

• The root user must be in sudoers file as the upgrade uses "sudo -u cb" as part of the upgrade process.
• The root User is by default in the /etc/sudoers file
• Having 'root' use 'sudo' to run a command as another user is required for running the upgrade script. When root is removed from the /etc/sudoers file, that action is prohibited.