Sudo Privilege Access for RHEL OS

AppViewX is installed on a Kubernetes engine. To install the underlying Kubernetes engine and other required dependencies, such as containerd, sudo access and executable permissions for the /tmp mount point are required.

Adding Commands in the Sudoers List

Below are the commands that must be added to the sudoers list to perform essential tasks such as installation, upgrade, Master Load Balancer configuration, prerequisite validation, and uninstallation of AppViewX. These commands are mandatory for any upgrade activities, and no alternative methods are supported.

Note: The package manager commands may vary depending on whether you are using RHEL/CentOS or Ubuntu. Please add them to the sudoers list accordingly.
S NO Commands to add in sudoers list
1 mkdir (path: /usr/bin/mkdir)
2 cp
3 chmod
4 sed
5 systemctl
6 rm
7 kubeadm
8 chown
9 yum
10 rpm
11 bash
12 mv
13 tee
14 whoami
15 grep
16 mount
17 umount
18 sleep
19 cat
20 crictl
21 timedatectl
22 nc
23 istioctl
24 calicoctl
25 touch
26 ln
27 journalctl
28 true
29 pkill
30 tar
31 netstat
32 apt
33 apt-get
34 dpkg
35 openssl
36 fips-mode-setup
37 update-crypto-policies
38 vi
39 sh (path: /bin/sh)
40 modprobe (path: /usr/sbin/modprobe)
41 sysctl
42 swapoff
43 setenforce
44 tcpdump
45 hwclock
46 ifconfig
47 ip
48 rmmod
49 firewall-cmd
50 <ABSOLUTE_PATH>/k8s-kms-plugin/k8s-kms-plugin
51 <APPVIEWX_INSTALLED_PATH>/prereq-temp/validation
The commands with the asterix (*) do not require separate installation but should be included in the sudo privileges list. These packages are included as part of the installer. (Installation path: up to appviewx_kubernetes, for example, /home/appviewx/appviewx_kubernetes).
Apart from the above commands, Sudo user must be able to read/write/execute in the following directories:
  • /etc/ (read/write/)
  • /var/ (read/write/)
  • /tmp/ (read/write/execute)
  • /usr/ (read/write/)
  • /home/SSH_OTHER_USER (Other user is user-defined in /scripts/appviewx.conf)