Setup of the SUDO command in Version 4
In order for this to work the iQSonar scanning user must be added to the sudoers file and REQUIRETTY directive must be disabled either at a user or system level more details available in the scanning pre-requisites document
Step-by-step guide
- From the UI navigate to Locations > Connections > SHH
- Change commandprefixcode to SUDO
- Change usecommandprefix to True
The actual command that is being run is as follow:
{Code}
{set the path};if sudo -l {command}>/dev/null; then sudo {command}; else {command};fi
{Code}
This difference might be important because the precise behaviour might be dependent on the user’s standard shell. ‘if’ is a shell command that can have slightly different behaviours on different shells.
… it is a very simple use of ‘if’, so it probably won’t be a problem … (probably).
Related articles