SUDO WRAPPER INSTALLATION GUIDE

After EPM Cloud for Linux clients are deployed throughout the enterprise, you can start using pbrun instead of sudo to request secured tasks.

On Linux x86-64, Ubuntu, and Debian systems, you can install and configure a sudo wrapper, which is a Perl script that translates sudo options into pbrun options and uses pbrun to execute the requested command. This ensures that users can continue typing sudo but pbrun is used to elevate privileges.

Important considerations before installing a sudo wrapper

• The sudo wrapper and its installation do not touch the preexisting sudoers file.
• Migrate the rules from sudoers to the EPM Cloud for Linux policy before installing the sudo wrapper.
• Many of sudo's switches must be implemented in the policy. This modified policy must be in place prior to installing the sudo wrapper to have those options available.

Prerequisites

• On RedHat 9, install the package perl-File-Copy.noarch before running the install script for Sudo Wrapper.
• An EPM Cloud for Linux client is installed with the Sudoers Roles already imported into the role-based policy.

Install the sudo wrapper

• Run the install via interactive mode
  pbsudowrapper_endpoint_setup -i
• Run the install via non-interactive mode
  pbsudowrapper_endpoint_setup -i -f

Uninstall the sudo wrapper

• Run the uninstall via interactive mode
  pbsudowrapper_endpoint_setup -u
• Run the uninstall via non-interactive mode
  pbsudowrapper_endpoint_setup -u -f

The sudo wrapper automatically uninstalls when the EPM Cloud for Linux client package is removed from the endpoint.