Change sudo to another command such as dzdo for privilege escalation?

calvincs
Kilo Explorer

In order for discovery to run properly, some AIX / Unix / Linux commands needs sudo escalation in order to run.   If your organization does not use sudo for permission escalation, and instead uses say dzdo, how does one change this system wide?

As an example, if you go to Discovery Definition -> Probes -> "Linux - Hardware Information" and looks at the Probe parameters, must_sudo is marked as True (Out of the Box), this means when this probe runs on a Linux system, it will run sudo in-front of the command to ensure it has enough privileges to execute the command.  
If however our company uses say dzdo instead of sudo, how does one change this for all probes where must_sudo is marked True?

Only thing I have come up with is marking this option as False, and adding dzdo in-front of the command.   However I'm curious if there is a more eloquent way of doing this?

Thanks in advance!

Calvin

1 ACCEPTED SOLUTION

tim_broberg
ServiceNow Employee
ServiceNow Employee

Sorry, no. As of Fuji, there are no other supported privilege escalation utilities, but this is becoming a common request and is under consideration for future releases.



What psuedo-sudo's are people using out there? I know I've heard of pbrun, pfexec, sesu, and now dzdo. Are there others people depend on?


    - Tim.


View solution in original post

7 REPLIES 7

Mike Farmer
Kilo Explorer

Is there any update on this feature request?   We would also like an alternate sudo command.


Mike


Yes, as of Helsinki, alternate privilege escalation commands are supported.



I think the support varies slightly by version, so make sure you search for it in the version you're using.


    - Tim.


Hi Mike Farmer,

 

Please check out this recently published KB article:

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0725604

 

Thanks.