The SFS Policy server has been upgraded to version 7.4.0.
On the plugin systems that are still running previous versions and joined to the policy server combinations of sudo and su fail and core dump.
Example:
[tu-01@lab-rl91 ~]$ sudo -i
[root@lab-rl91 ~]# su testuser
File size limit exceeded (core dumped)
This has been confirmed on SFS versions 7.2 and 7.3 after upgrading the policy server to 7.4.0.
Safeguard for Sudo product defect.
ID for tracking 481981
Workaround 1: Upgrade the SFS plugin systems to 7.4.0. The issue is resolved once the plugin system is upgraded to 7.4.0.
Workaround 2: Add the following defaults line in the policy server sudoers file so that all the joined plugin agents will pick up the change.
Defaults rlimit_fsize = 1073741824
Example steps:
/opt/quest/sbin/pmpolicy checkout -d /tmp
** Validate options [ OK ]
** Checkout to /tmp/policy_sudo
** Create directory [ OK ]
** Check out working copy [ OK ]
** Checked out revision:8
** Copy files [ OK ]
** Perform syntax check [ OK ]
Then edit the file using 'vi' or whichever editor you use:
vi /tmp/policy_sudo/sudoers
And add the line:
Defaults rlimit_fsize = 1073741824
Then commit the policy.
# /opt/quest/sbin/pmpolicy commit -d /tmp
** Validate options [ OK ]
** Commit copy in directory:/tmp/policy_sudo
** Check directory [ OK ]
** Perform syntax check [ OK ]
** Verify files to commit [ OK ]
Within 30 mins the plugin systems should have the new revision with the fix.
Fix: This will be fixed in a future version of SFS. Product Defect ID 481981
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center