Hello,
Is there a fine grained way to control the actions that an agent will allow? I understand that there is an agent = enable or agent = disable configuration for the agent service, but I would like to enable specific actions and disable others. I would like to allow only agent restarts and disallow the restart system and shutdown system commands on the agent. I have disabled the restart system and shutdown system agent commands in the object tools section of the server, but am hoping there is a fine grained control of this function at the agent.
Thanks,
-Dan
Hi,
no, currently there is no fine grained control on agent level for that. You can however override actions provided by platform subagent using Action option in configuration file, like
Action = System.Restart:/bin/false
(or any other harmless command).
Best regards,
Victor
This seems like a good compromise, I will have to test this.
Thanks!