VMware Smart Assurance NCM : NCM installation/uninstallation fails if /tmp is mounted with noexec option

Products

• VMware

Issue/Introduction

Symptoms:

NCM installation/uninstallation fails if /tmp is mounted with noexec option
Install and debug log will not have errors logged pointing to /tmp permission

Environment

VMware Smart Assurance - NCM

Cause

It is recommended to mount /tmp with exec option as installer creates iatemp file during installation and uninstallation which runs from /tmp directory per install.sh script.

Resolution

Advise users to mount /tmp with exec option.

If user is not ready to enable execute permission due to security reason or to adhere with security compliance policy then export below command before starting the installer for both installation and uninstallation.

export IATEMPDIR=<Directory Name which has exec permission>
Example:
export IATEMPDIR=/opt
here
/opt is mounted with exec permission
Now run
./install.sh -i console for NCM installation
$VOYENCE_HOME/software/Uninstall_Core/Uninstall_VMware_Smart_Assurance_Network_Configuration_Manager for NCM uninstallation.

Note: Check mount details of /tmp by running cat /etc/fstab in linux server where NCM installation fails.
Sample output:

#
# /etc/fstab
# Created by anaconda on Thu Feb  3 09:44:55 2022 
#
# Accessible filesystems, by reference, are maintained under '/dev/disk/'.
# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info.
#
# After editing this file, run 'systemctl daemon-reload' to update systemd
# units generated from this file.
#
/dev/mapper/vg_root-lv_root /                       ext4    defaults        1 1
UUID=4f5f876d-3e03-4d60-8a57-b0667b80deaf /boot                   ext4    defaults,nosuid,nodev        1 2
/dev/mapper/vg_root-lv_home /export/home            ext4    defaults,nosuid,noexec,nodev,usrquota,grpquota,quota        1 2
/dev/mapper/vg_root-lv_sync_dir /opt/Motorola/dsr/sync_dir ext4    defaults        1 2
/dev/mapper/vg_root-lv_tmp /tmp                    ext4    defaults,nodev,nosuid,noexec        1 2
/dev/mapper/vg_root-lv_var /var                    ext4    defaults,nodev        1 2
/dev/mapper/vg_root-lv_repo /var/cache/yum          ext4    defaults,nodev        1 2
/dev/mapper/vg_root-lv_core /var/core               ext4    defaults,nodev        1 2
/dev/mapper/vg_root-lv_crash /var/crash              ext4    defaults,nodev        1 2
/dev/mapper/vg_root-lv_getlogs /var/getlogs            ext4    defaults,nodev        1 2
/dev/mapper/vg_root-lv_log /var/log                ext4    defaults,nodev,nosuid,noexec        1 2
/dev/mapper/vg_root-lv_audit /var/log/audit          ext4    defaults,nodev,nosuid,noexec        1 2
/dev/mapper/vg_root-lv_logins /var/log/logins         ext4    defaults,nodev,nosuid,noexec        1 2
/dev/mapper/vg_root-lv_root_logins /var/log/root_logins    ext4    defaults,nodev,nosuid,noexec        1 2
/dev/mapper/vg_perstore-lv_perstore /var/opt/perstore       ext4    defaults,nodev        1 2
/dev/mapper/vg_root-lv_viewlogs /var/viewlogs           ext4    defaults,nodev        1 2
/dev/mapper/vg_root-lv_swap none                    swap    defaults        0 0
tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0
tempfs /var/opt/Motorola/bar/trigger tmpfs size=2m,uid=1046,gid=3006,mode=3700,rootcontext="system_u:object_r:rsync_tmp_t:s0" 1 0