Hi Friends ,
I want to do a security fix by running a remediate job. I am able to create and run Discover job and compliance Job successfully
with a certain Role named "BLAdmins" whch is mapped to a user id in unix server named "deploy".
# RBACAdmins ACLs
# BLAdmins ACLs
But when i try to remediate i am getting the below error.
Error Faced :
03/12/16 22:50:32.879 ERROR bldeploy - [/tmp/stage/libagentrpc.so.1.0] Failed to change the owner for /tmp/stage/libagentrpc.so.1.0 uid 0 gid 0: Operation not permitted
03/12/16 22:50:32.881 ERROR bldeploy - [/tmp/stage/libagentrpc.so.1.0] Apply failed: id = 1
Error during Commit phase of Remediate Job :
Failed to change the owner for /var/tmp/stage/libagentrpc.so.1.0 uid 0 gid 0: Operation not permitted
Files which are about to be patched in the servers are in the below ownership.
$ ls -ltr | grep librpccommon
-rwxr-xr-x 1 deploy wldeploy 1398044 Jan 25 2013 librpccommon.so.1.0
lrwxrwxrwx 1 root root 19 Jan 25 2013 librpccommon.so -> librpccommon.so.1.0
I tried to switch the Role from "BLAdmins" to "RBACAdmins" but it disables many options like import on component template,
Disabled "remediate" option on Rules View and Server View under the compliance job created.
Please suggest how to overcome this ownership issue
what user owns these files: librpccommon.so.1.0 libagentrpc.so.1.0 ?
if you are mapped to a user that doesn't own the files you are trying to replace, you won't be able to replace them.