Uploaded image for project: 'Ansible Automation Platform RFEs'
  1. Ansible Automation Platform RFEs
  2. AAPRFE-1350

Have the installer for AAP to stop having it check for the sudo package to be installed and only check for existence of the sudo command

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • 2.4, 2.5
    • platform-installer
    • None
    • False
    • Hide

      None

      Show
      None
    • False

      The reason for this is because some customers use another product (Centrify) which comes with a modified sudo to allow us to use active directory to authenticate proper escalation for all users to the root user.

      They have a policies in place where we don't allow (actually remove the sudo package) the installation of the sudo package because someone could modify the sudoers files outside their control and have root access without their knowledge.

      This is the reason they remove the package to comply with security standards.

      Having the installer require the installation of the package defeats this purpose and requires them to work-around this or needing to install the package temporarily.

      In such cases where they might have to install the package, the step to remove it could be missed and lead to an issue with security where someone could modify the sudoers files and have root account without their knowledge.

              rhn-sa-pgriffiths Phil Griffiths
              rhn-gps-jammcder James McDermott
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: