Unsupported content

 

This version of the documentation is no longer supported. However, the documentation is available for your convenience. You will not be able to leave comments.

Compliance updates for SP1

BMC Server Automation version 8.5 SP1 has the following updates:

Inclusion of commands as assets in a Compliance rule

The Rule Editor for compliance rules now has enhanced support for shell scripting commands.  A new Command asset is introduced, with various attributes for several forms of command outputs. Using this new asset type, you can create a rule condition that checks for a specific command output. This replaces the need to define such commands through a local configuration object in the component template. For more information see Defining a basic condition.

Defining variables in Compliance rules

You can now define a variable within a Compliance rule by assigning a value to a local property of the component template. You can then use your property-based variable in subsequent conditions in the same rule. The following new operators have been introduced to support this new feature:

  • The assign operator (represented by the := combination of characters) can be used to assign a transient value that is not saved to the database, but rather temporarily stored only for the duration of rule execution. Use this operator if you want to avoid unnecessary storage of data in the database and do not plan to perform remediation based on the results of the compliance rule analysis.
  • The persist operator can be used to assign a value that is persisted in the database. Use this operator if you plan to perform remediation based on the results of the compliance rule analysis.

For more information see Defining a basic condition.

New file/directory properties

The following file/directory properties have been added in BMC Server Automation. These properties can be used in a BLPackage, can be viewed in Live Browse, and can also be used in Compliance rules.

Property NameTypeDescription
User Owner Name StringThe name of the user owner of the file. This property can be used to map the user name on another machine.
Group Owner NameStringThe name of the group owner of the file. This property can be used to map the group name on another machine.
Unix ACLBoolean (true/false)Whether an Access Control List (ACL) is defined on the file (true or false).

Note

These properties are not visible for a directory in Live Browse.

Added new configuration files

BMC Server Automation includes new configuration files for following operating systems:

Operating SystemConfiguration files
HP-UX

/etc/rc.config.d/auditing

/etc/inetd.conf

/etc/shells

/etc/default/security

/etc/rc.config.d/syslogd

/etc/hosts.allow

/etc/hosts.deny

/etc/nsswitch.conf

/etc/opt/samba/smb.conf

/etc/rc.config.d/ipfconf

RHEL

/etc/login.defs

/etc/pam.d/system-auth

/etc/pam.d/system-auth-ac

/etc/default/useradd

/etc/vsftpd/vsftpd.conf

For complete list of configuration files, see Configuration files.

Was this page helpful? Yes No Submitting... Thank you

Comments