One Identity Safeguard for Sudo 7.0
Release Notes
October 2020
These release notes provide information about the One Identity Safeguard for Sudo release.
Topics:
About this release
Safeguard for Sudo helps Unix/Linux organizations take privileged account management through Sudo to the next level: with a central policy server, centralized management of Sudo and sudoers, centralized reporting on sudoers and elevated rights activities, and event and keystone logging of activities performed through Sudo. With Safeguard for Sudo, One Identity provides a plug-in to Sudo 1.8.1 (and later) to make administering Sudo across a few, dozens, hundreds, or thousands of Unix/Linux servers easy, intuitive, and consistent. It eliminates the box-to-box management of Sudo that is the source of so much inefficiency and inconsistency. In addition, the centralized approach delivers the ability to report on the change history of the sudoers policy file.
Safeguard for Sudo 7.0 is a major release that provides updated platform support and new features.
NOTE: Beginning with version 7.0, Safeguard for Sudo supports only Linux-based systems for Safeguard policy servers.
New in Safeguard for Sudo 7.0:
- Rebranded from Privilege Manager for Sudo to Safeguard for Sudo.
- Added Sudo recording service
- Added ability for Safeguard for Sudo to join a policy server in pmpolicy mode.
The following features are no longer supported beginning with this release:
-
Management Console for Unix: After careful consideration, One Identity has decided to cease the development of the Management Console for Unix (MCU). Therefore, the MCU will enter limited support for all versions on April 1, 2021. Support for all versions will reach end of life on Nov 1, 2021. For definitions of support, see the Software Product Support Lifecycle Policy.
As One Identity retires the MCU, we are building its feature set into modern platforms starting with Software Distribution and Profiling. Customers that use the MCU to deploy Authentication Services and Safeguard for Sudo can now use our Ansible collections for those products, which can be found at Ansible Galaxy. Future releases of Safeguard for Sudo will include other MCU features such as reporting, policy editing, and IOlog viewing and searching. If you are interested in receiving more information about these upcoming features, please contact your sales representative.
-
Supported platforms: Beginning with version 7.0, Safeguard for Sudo supports only Linux-based systems for pmpolicy servers. For a list of currently supported platforms, see Supported platforms.
The following table provides a list of supported platforms for Safeguard clients.
NOTE: Beginning with version 7.0, Safeguard for Sudo supports only Linux-based systems for Safeguard policy servers.
Table 1: Linux supported platforms — server and plugin
|
Amazon Linux AMI |
|
x86_64 |
|
CentOS Linux |
5, 6, 7, 8 |
Current Linux architectures: s390, s390x, PPC64, PPC64le, ia64, x86, x86_64, AARCH64 |
|
Debian |
Current supported releases |
x86_64, x86, AARCH64 |
|
Fedora Linux |
Current supported releases |
x86_64, x86, AARCH64 |
|
OpenSuSE |
Current supported releases |
x86_64, x86, AARCH64 |
|
Oracle Enterprise Linux (OEL) |
5, 6, 7, 8 |
Current Linux architectures: s390, s390x, PPC64, PPC64le, ia64, x86, x86_64, AARCH64 |
|
Red Hat Enterprise Linux (RHEL) |
5, 6, 7, 8 |
Current Linux architectures: s390, s390x, PPC64, PPC64le, ia64, x86, x86_64, AARCH64 |
|
SuSE Linux Enterprise Server (SLES)/Workstation |
11, 12, 15 |
Current Linux architectures: s390, s390x, PPC64, PPC64le, ia64, x86, x86_64, AARCH64 |
|
Ubuntu |
Current supported releases |
x86_64, x86, AARCH64 |
Table 2: Unix and Mac supported platforms — plugin
|
Apple macOS |
10.12, 10.13, 10.14, 10.15 |
x86_64 |
|
FreeBSD |
11.x, 12.x |
x86_64 |
|
HP-UX |
11.31 |
PA, IA-64 |
|
IBM AIX |
7.1, 7.2 |
Power 4+ |
|
Solaris |
10.x, 11.x |
SPARC, x64 |
