Controlling permissions on the files and subdirectories in the tmp directory


Warning

Important

This feature is applicable to all RSCD Agent versions.

Temporary files and directories are created in the RSCD_INSTALL_DIR/tmp directory during various operations performed in TrueSight Server Automation. 

On Linux and UNIX servers, you can control the permissions on the files and subdirectories created in the RSCD_INSTALL_DIR/tmp directory by using the RSCDTmpFileFolderPermissions parameter in the agentconfig section of blasadminThe value of this parameter must be specified in the octal (UNIX), 4-digit format. The default value of this parameter is none, which indicates that permissions will be set according to the umask setting on the target server. You must provide rwx permissions for the owner. Other digits are configurable. For example, you can specify 1775, 1750, or 0764, but not 1675, 1550, or 0475. 

The subdirectories created in the tmp directory will have the same permissions as provided in the parameter value. The files created in the tmp directory will have a combination of the specified value and 0777 permissions. For example, if you have specified the parameter value as 1775, the files created in the subdirectory will have 0775 (1775 & 0777) permissions.

Warning

Important

You cannot control access to the files and directories that are created during the out-of-the-box content execution in the tmp directory by using the RSCDTmpFileFolderPermissions parameter.

In a multiple Application Servers (MAS) environment, if you set this parameter for any of the Application Server, it applies to all the other Application Servers.

To configure permissions on the contents of the tmp directory

Use the blasadmin command to configure the RSCDTmpFileFolderPermissions parameter value. For example, to set the value to 1775, use the following command:

set agentconfig RSCDTmpFileFolderPermissions 1775

To show the current value of the RSCDTmpFileFolderPermissions parameter, use the following command:

show agentconfig RSCDTmpFileFolderPermissions 

To set the value of the RSCDTmpFileFolderPermissions parameter to none, use the following command:

set agentconfig RSCDTmpFileFolderPermissions ""

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

TrueSight Server Automation 24.2