Service Manager UNIX - SetUID-BIT

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

As of Version 9.00A Service Pack 12, Version 10 Service Pack 6 and Version 11.1.1 and 11.2.0 the behavior has been changed to the old Version 8.00A behavior, the change is described in more detail as follows:

Unix Service Manager program no longer needs to be started with root user privileges or with setuid-bit in order to stop Unix Agents. As of Automation Engine Version 9.00A the handling of process user IDs of the Unix Agent had been changed in order to enable the Agent to handle user context switches more powerful. The Agent obtained real user root privileges in addition to effective user root privileges. For that reason, the Service Manager also had to be started with root privileges which in turn caused a series of problems when the Service Manager did not find a valid LD_LIBRARY_PATH or LIBPATH for itself and the components it started.  This method of handling user privileges has been changed now:  The Unix Agent no longer needs to obtain root privileges for the real user of its process. The Agents real user now is the start user (V8 behavior). As a consequence, also the Service Manager for Unix no longer needs to be started with root user privileges to be able to terminate the Unix Agent.  As a result, the installation procedure for the Unix Agent is much more simple and similar to the installation method of Version 8.00A* Unix Agents.  This change applies as of the following versions: Automation.Engine 9.13.0 SP12, Automation.Engine 10.0.6 SP6, Automation.Engine 11.1.1 SP1, Automation.Engine 11.2.0

Environment

OS: Unix