Go to main content

Oracle® Advanced Support Gateway Security Guide

Exit Print View

Updated: April 2024
 
 

Solaris sudo Profile

For Solaris users, add the following entries to the sudoers file:

Cmnd_Alias     ACSSINSTALL = /usr/bin/chmod, /usr/bin/chown, \
                /usr/bin/chgrp, /usr/bin/crontab, /usr/bin/cp, \
                /usr/bin/ex, /usr/bin/grep, /usr/sbin/groupadd, \
                /usr/bin/ls, /usr/bin/mkdir, /usr/bin/passwd, \
                /usr/bin/profiles, /usr/lib/fm/notify/asr-notify, \
                /usr/bin/rmdir, /usr/sbin/svcadm,/usr/sbin/asradm, \
                /usr/sbin/useradd, /usr/sbin/usermod, \
                <ServiceEMBase>/agent_home/core/<version>/root.sh,\
                /opt/ipmitool/bin/ipmitool, /opt/ipmitool/sbin/ipmitool, \
                /opt/oracle.cellos/compmon/exadata_mon_hw_asr.pl, \
                /opt/oracle.cellos/imageinfo, \
                /usr/bin/tfactl, \
                /usr/bin/ahfctl, \
                <ServiceEMBase>/agent_home/agent_<version>/root.sh,\
                /tmp/install_ahf_no_cfg.sh, \
                /tmp/install_ahf.sh, \
                /opt/exalogic/usr/sbin/imageinfo
                /usr/bin/exachk
                /opt/oracle.ahf/exachk/exachk

<user> ALL=(ALL) ACSSINSTALL

The user must also have the sudo binary in their path to allow it to execute without a full path.

If the OEM agents are installed using an NFS mount that is to be configured by Oracle, then the user must also have the following command alias created as assigned to the user:

Cmnd_Alias     ACSSH/SCPAREDINSTALL = /sbin/mount
<user> ALL=(ALL) ACSSH/SCPAREDINSTALL