One Identity Safeguard for Sudo 7.1
Release Notes
February 2021
These release notes provide information about the One Identity Safeguard for Sudo release.
Topics:
About this release
Safeguard for Sudo helps Unix/Linux organizations take privileged account management through Sudo to the next level: with a central policy server, centralized management of Sudo and sudoers, centralized reporting on sudoers and elevated rights activities, and event and keystone logging of activities performed through Sudo. With Safeguard for Sudo, One Identity provides a plug-in to Sudo 1.8.1 (and later) to make administering Sudo across a few, dozens, hundreds, or thousands of Unix/Linux servers easy, intuitive, and consistent. It eliminates the box-to-box management of Sudo that is the source of so much inefficiency and inconsistency. In addition, the centralized approach delivers the ability to report on the change history of the sudoers policy file.
Safeguard for Sudo 7.1 is a minor release that includes Resolved issues.
NOTE: Beginning with version 7.1, Safeguard for Sudo supports only Linux-based systems for Safeguard policy servers.
New in Safeguard for Sudo 7.1:
-
Added support for serving multiple sudoers policies from a single policy server group.
-
Added support for version 49 of the sudoers policy language, which includes allowing Cmd_Alias to be specified instead of Cmnd_Alias, support for multiple digests per command, and support for the CWD and CHROOT options.
The following is a list of issues addressed in this release.
Table 1: General resolved issues
|
High CPU and errors existed on the policy server for pmmasterd processes. |
260968 |
The following table provides a list of supported platforms for Safeguard clients.
NOTE: Beginning with version 7.1, Safeguard for Sudo supports only Linux-based systems for Safeguard policy servers.
Table 2: Linux supported platforms — server and plugin
|
Amazon Linux AMI |
|
x86_64 |
|
CentOS Linux |
5, 6, 7, 8 |
Current Linux architectures: s390, s390x, PPC64, PPC64le, ia64, x86, x86_64, AARCH64 |
|
Debian |
Current supported releases |
x86_64, x86, AARCH64 |
|
Fedora Linux |
Current supported releases |
x86_64, x86, AARCH64 |
|
OpenSuSE |
Current supported releases |
x86_64, x86, AARCH64 |
|
Oracle Enterprise Linux (OEL) |
5, 6, 7, 8 |
Current Linux architectures: s390, s390x, PPC64, PPC64le, ia64, x86, x86_64, AARCH64 |
|
Red Hat Enterprise Linux (RHEL) |
5, 6, 7, 8 |
Current Linux architectures: s390, s390x, PPC64, PPC64le, ia64, x86, x86_64, AARCH64 |
|
SuSE Linux Enterprise Server (SLES)/Workstation |
11, 12, 15 |
Current Linux architectures: s390, s390x, PPC64, PPC64le, ia64, x86, x86_64, AARCH64 |
|
Ubuntu |
Current supported releases |
x86_64, x86, AARCH64 |
Table 3: Unix and Mac supported platforms — plugin
|
Apple macOS |
10.12, 10.13, 10.14, 10.15 |
x86_64 |
|
FreeBSD |
11.x, 12.x |
x86_64 |
|
HP-UX |
11.31 |
PA, IA-64 |
|
IBM AIX |
7.1 Technology Level 3 and higher, 7.2 |
Power 4+ |
|
Solaris |
10.x, 11.x |
SPARC, x64 |
