Security concerns with discovery

[patrickmcgonagl]

We are having issues with getting credentials for Macs and Unix systems.   The sys admins and managers of those groups are concerned about what commands - specifically anything sh and bash - that we will be running on the systems.   So far we are only using the OOB config for Discovery.   Is there a security document that we can give them or a list of the specific commands that are set up OOB?

[sarahbr]

Hi Patrick!   Here is a list of commands that require root for discovery.   UNIX and Linux commands requiring root privileges for Discovery and Orchestration The docs site has a ton of great info too!  

[adilrathore]

For UNIX & linux below access requirements for non-root credentials are specified on the below page:

UNIX and Linux credentials

[patrickmcgonagl]

I think they are looking for the scripts that are on this table ecc_agent_script_file.list

[bernyalvarado · Accepted solution]

Hi patrickmcgonagle, in addition to the information already provided, here goes a complete list of probe SSH commands used OOB by Discovery:

Discovery probe SSH commands

I hope this helps!

Do you have any further questions?

Thanks,

Berny