Discussions specific to the VMware vSphere hypervisor
Post Reply
Peejay62
Expert
Posts: 215
Liked: 35 times
Joined: Aug 06, 2013 10:40 am
Full Name: Peter Jansen
Contact:

default execute directory /tmp for Linux servers

Post by Peejay62 »

probably I will create a supportcase on this matter but in advance, I noticed that when adding a Linux server to the managed servers view some kind of agent or software is started from /tmp on that server. Is there a possibility to have that changed to another path?
Because of implementing various hardening rules, of which one is put "noexec" on the /tmp fs, adding a linux server fails, at least it cannot get all the info of the Linux server. Anybody ran into this and had it solved?
btw, It is a good thing to put noexec on /tmp, intruders like to make use of /tmp to have unwanted things running.

thanks, Peter

tsightler
VP, Product Management
Posts: 5895
Liked: 2739 times
Joined: Jun 05, 2009 12:57 pm
Full Name: Tom Sightler
Contact:

Re: default execute directory /tmp for Linux servers

Post by tsightler »

Hi Peter. Yes, it is possible to change this behavior via LinAgentFolder registry key. The key should be placed in HKLM\Software\Veeam\Veeam Backup and Replication registry branch.

Note that if you set this key all communications with Linux servers will attempt to use this folder. This can lead to some strange errors messages if the folder doesn't exist, for example, if you forget to create it on a host. I provision my systems with a veeam_svcs account which has permissions to /opt/veeam (which it uses as the home folder for the service account) and I also restrict operations of sudo to that folder (and in some cases specific commands in that folder).

Peejay62
Expert
Posts: 215
Liked: 35 times
Joined: Aug 06, 2013 10:40 am
Full Name: Peter Jansen
Contact:

Re: default execute directory /tmp for Linux servers

Post by Peejay62 »

Hi Tom,

thanks, it works.

Thomas_Lee
Lurker
Posts: 2
Liked: 1 time
Joined: Jun 08, 2021 3:53 am
Full Name: Thomas Lee
Contact:

Change the default execute directory /tmp for Linux Servers to /opt/veeam (Support case number is 04850197)

Post by Thomas_Lee »

Hi , i would like to change the default execute directory /tmp for Linux Servers to /opt/veeam. How do i go about doing this? I came across an article however i would like to enquire the details in creating the LinAgent Folder registry key(Details that are needed to be set etc). Thanks.

vmware-vsphere-f24/default-execute-dire ... 65091.html

nikolaj
Veeam Software
Posts: 103
Liked: 32 times
Joined: Mar 22, 2021 11:19 am
Contact:

Re: default execute directory /tmp for Linux servers

Post by nikolaj » 1 person likes this post

Hi Thomas,

I moved your topic here since it covers the same subject.
The registry key should be a standard String value (REG_SZ) with the appropriate path specified in the Value data form. You should create it in the HKEY_LOCAL_MACHINE\Software\Veeam\Veeam Backup and Replication registry branch.

Let us know if you need more info on the matter.

Thanks!

Thomas_Lee
Lurker
Posts: 2
Liked: 1 time
Joined: Jun 08, 2021 3:53 am
Full Name: Thomas Lee
Contact:

Re: default execute directory /tmp for Linux servers

Post by Thomas_Lee » 1 person likes this post

Hi Nikolaj,

Thanks and appreciate the prompt reply, will do so as advice. Have a great day.

Post Reply

Who is online

Users browsing this forum: No registered users and 25 guests