Safeguard for Sudo 7.3 - Administration Guide

Prior to installing Safeguard for Sudo, ensure your system meets the minimum hardware and software requirements for your platform.

Table 1: Hardware and software requirements
Component	Requirements
Operating systems	See Supported platforms to review a list of platforms that support Safeguard clients.
Disk space	80 MB of disk space for program binaries and manuals for each architecture. Considerations: At a minimum, you must have 80 MB of free disk space. The directories in which the binaries are installed must have sufficient disk space available on a local disk drive rather than a network drive. Before you install Safeguard, ensure that the partitions that will contain /opt/quest have sufficient space available. Sufficient space for the keystroke logs, application logs, and event logs. The size of this space depends on the number of servers, the number of commands, and the number of policies configured. The space can be on a network disk drive rather than a local drive. The server hosting Safeguard must be a separate machine dedicated to running the pmmasterd daemon.
SSH software	You must install and configure SSH client and server software on all policy server hosts. You must also install SSH client software on all hosts that will use the Sudo Plugin. You must enable access to SSH as the root user on the policy server hosts during configuration of the policy servers. Both OpenSSH 4.3 (and later) and Tectia SSH 6.4 (and later) are supported.
Processor	Policy Servers: 4 cores
RAM	Policy Servers: 8 GB

Table 2: Primary policy server and host system installation requirements
Systems Required	Minimum Requirements
Primary Policy Server	Supported Unix or Linux operating system SSH (ssh-keyscan binary)
Host System	Supported Unix, Linux, or macOS platform SSH (ssh-keyscan binary) Sudo 1.8.1 (or later)

Configure the firewall ports appropriately when installing the Sudo Plugin on separate machines from the policy server.

Table 3: Masterport requirements
Variable	Default Port	Description
masterport	12345	TCP/IP port for pmmasterd. Safeguard uses the masterport to communicate with the pmmasterd (policy server daemon).

The following table provides a list of supported platforms for Safeguard for Sudo clients.

NOTE: Beginning with version 7.0, Safeguard for Sudo supports only Linux-based systems for Safeguard for Sudo policy servers.

CAUTION: As of Safeguard for Sudo version 7.3, the following platforms and architectures are no longer supported:

Table 4: Linux supported platforms — server and plugin
Platform	Version	Architecture
Alma Linux	8, 9	x86_64, AARCH64, PPC64le, s390x
Amazon Linux	AMI, 2, AL2022	x86_64
CentOS Linux	7, 8, 9	Current Linux architectures: s390x, PPC64, PPC64le, x86, x86_64, AARCH64
CentOS Stream	8, 9	x86_64, AARCH64, PPC64le, s390x
Debian	Current supported releases	x86_64, x86, AARCH64
Fedora Linux	Current supported releases	x86_64, x86, AARCH64
OpenSuSE	Current supported releases	x86_64, x86, AARCH64
Oracle Enterprise Linux (OEL)	7, 8, 9	Current Linux architectures: s390x, PPC64, PPC64le, x86, x86_64, AARCH64
Red Hat Enterprise Linux (RHEL)	7, 8, 9	Current Linux architectures: s390x, PPC64, PPC64le, x86, x86_64, AARCH64
Rocky Linux	8, 9	x86_64, AARCH64, PPC64le, s390x
SuSE Linux Enterprise Server (SLES)/Workstation	12, 15	Current Linux architectures: s390x, PPC64, PPC64le, x86, x86_64, AARCH64
Ubuntu	Current supported releases	x86_64, x86, AARCH64