EDR Cluster: Cannot add minion when running as non-root user

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Commands run as non-root user
• Adding minion fails with message

Incomplete sudo permissions configured for user on host . The user is missing the following 2 sudo privileges:
1) sudo -n /usr/share/cb/cbupgrade --check
2) sudo -n /usr/share/cb/cbupgrade --non-interactive

Environment

• EDR Server: 7.4.x and below
• Clustered Evironment

Cause

Permissions checks failing due to a limitation - CB-18417

Resolution

• This issue is fixed in server version 7.5
• As a workaround, install cb-enterprise onto the minion
  1. Confirm cluster version:
     1. On primary node, run: rpm -qa | grep cb-enterprise
     2. The version listed will match the server version installed. 
        • Ex. cb-enterprise-7.4.2.210323.1810-1.el7.x86_64 would be EDR server 7.4.2
  2. On the minion
     1. Copy over the Carbon Black release rpm and install license 

        • rpm -ivh <carbon-black-release-company-name.rpm>

     2. Edit /etc/yum.repos.d/CarbonBlack on the affected minion to adjust baseurl to match the cluster: https://community.carbonblack.com/t5/Knowledge-Base/EDR-How-to-Install-a-Different-Server-Version/ta-p/81753
     3. Run: yum clean all
     4. Install cb-enterprise: yum install cb-enterprise
  3. On the primary node, add the minion to the cluster
     • /usr/share/cb/cbcluster add-node -u <non_root_user>
  4. Start the cluster
     • /usr/share/cb/cbcluster start

Additional Information

• Contact Carbon Black Support or the organization's account rep if unable to find the release rpm
• Adding a minion as the root user will not require the above steps.