agent in 'root' mode but no job submitted as owner 'root'
Posted: 04 Mar 2015 7:59
Hi All,
In our production environment all agents are running in root mode , hence we do not need to mention
password for different 'owner' (user id ) to execute jobs.
Now Security team has raised concern & want to run all agent in non root mode.
Could you please help me to clear my following doubts :
1.Will Control M Operator ( With access to EM GUI , Desktop ) be able to create job with owner as 'root'
& thus able to submit jobs as root ?
2.If ans to 1. is Yes - Is there any easier option to stop this ? So that though agent will run in 'root' mode
but no job can be submitted as owner 'root ' from Control M?
3. Which is the best practice ? Is there something recommended by BMC on this -
(like running agent in 'root mode' is preferred / running agent in 'non root mode' is preferred etc.)
In our production environment all agents are running in root mode , hence we do not need to mention
password for different 'owner' (user id ) to execute jobs.
Now Security team has raised concern & want to run all agent in non root mode.
Could you please help me to clear my following doubts :
1.Will Control M Operator ( With access to EM GUI , Desktop ) be able to create job with owner as 'root'
& thus able to submit jobs as root ?
2.If ans to 1. is Yes - Is there any easier option to stop this ? So that though agent will run in 'root' mode
but no job can be submitted as owner 'root ' from Control M?
3. Which is the best practice ? Is there something recommended by BMC on this -
(like running agent in 'root mode' is preferred / running agent in 'non root mode' is preferred etc.)