Understanding Commands Executed during Installation

The section lists the commands executed by the AppViewX installer that requires Sudo access.

To restrict the commands that a Sudo user has access to, enable the following commands:

  • sudo kubeadm
  • sudo kubectl
  • sudo yum remove
  • sudo yum install
  • sudo systemctl daemon-reload
  • sudo rpm -ivh --force *.rpm
  • sudo modprobe br_netfilter
  • sudo swapoff -a
  • sudo iptables -F
  • sudo date --set
  • sudo -S setenforce 0
  • sudo -S sysctl -w net.bridge.bridge-nf-call-iptables=1

Apart from the above commands, Sudo user must be able to read/write/execute in the following directories:

  • /etc/
  • /root/
  • /var/lib
  • /tmp
  • /usr/local/bin
  • /home/SSH_OTHER_USER (Other user is user-defined in /scripts/appviewx.conf)