Privilege Elevation ?

[larry cole_2]

How is Privilege Elevation implemented on target Linux systems ? Does HP SIM modify the /etc/sudoers file on the target Linux system ? If not, what entry is required for the login account being used ?

An entry like:

hpsim ALL=(ALL) ALL

is probably NOT acceptable.


Customer has numerous roles defined in the existing /etc/sudoers file for various levels of system admins.

Can the commands used by HP SIM be identified so they can be explicited added to sudoers if required by the customer's security folks ?

Any examples available ?

How do other Enterprise customers handle this ?

Many thanks!