On the Java Agent, the setting root=NO_START is ignored

Products

• CA Automic Workload Automation - Automation Engine
• Automic SaaS
• CA Automic One Automation

Issue/Introduction

Setting the Java Agent up to prevent executions by root does not work:

Setting this on the Agent side:
[GLOBAL]
userid_type=EXCL
login_check=no
[USERID]
root=NO_START

Settings in UC_HOSTCHAR*:
ANONYMOUS_JOB=Y

Even with these settings, the job can be executed with the user root. 

Environment

Release: 24.x

Component: Agent Unix 

Cause

DE170589

Resolution

Update to a fix version listed below or a newer version if available.

Fix version:

Component(s): Agent Unix

Agent Unix  24.4.0 HF3 - Available

Additional Information

Defect public description: The Unix Agent evaluate the [USERID] setting incorrectly. The setting for root user is ignored if the Agent is started as root or when SUID is set for ./ucxjlx6 binary file.