Control Compliance Suite support sudo to the root account for data collection on Unix/Linux systems.

Products

• Control Compliance Suite
• Control Compliance Suite Standards Server

Issue/Introduction

Does CCS support authenticating with one account and using sudo to root for data collection on Unix/Linux systems?

 

Environment

CCS 12.6.X

Resolution

 

CCS does support authenticating with one account and sudo to root for general query credentials, but not does not support unique query credentials per-CCS user.

To configure the general query credentials:

1. From the CCS Console, navigate to Settings > System Topology
2. Select the Common Tasks context menu and choose Configure Platform Settings
3. Select the Unix platform
4. Select the bvAgentlessConfig.ini settings file
5. Click the Download link and save to the Desktop
6. Open bvAgentlessConfig.ini in notepad
7. In the [default] section, comment out the line SecuredFiles=SecuredFiles.dat by adding a semicolon to the beginning of the line
8. In the [default] section, uncomment out the line SupportsSudo=false by removing a semicolon from the beginning of the line
9. Change the value of SupportsSudo to from false to true
10. Save the file and close notepad
11. Return to the CCS Console platform settings dialog and upload the bvAgentlessConfig.ini file
12. Close the platform settings dialog
13. From the Infrastructure Tasks context menu, select Sync Configuration
14. Return to Manage > Queries, re-run the Unix Users query and verify that data is being collected

NOTE: su is not supported only sudo is. Nor are any 3rd party utilities e.g. PowerBroker.

Additional information:

Configuration for CCS agentless data collection on UNIX targets