Sudo command privileges

When you install, operate, or uninstall IBM Spectrum® Control as a non-root user on AIX® or Linux® operating systems, you are required to have sudo privileges to multiple commands. Use command aliases in the /etc/sudoers file to configure your sudo privileges for multiple commands.

Example command aliases

The following command aliases are examples that you can create for installing, operating, and uninstalling IBM Spectrum Control:
  • Cmnd_Alias IBMSC_INSTALL = /usr/bin/xauth, /Downloads/Db2_11.5_image/server_dec/db2setup, 
/opt/ibm/db2/V11.5/cfg/db2ln, /Downloads/IBM_Spectrum_Control_image/SC/setup.bin
  • Cmnd_Alias IBMSC_OPERATION = /opt/IBM/TPC/scripts/*.sh, /opt/IBM/TPC/scripts/ldap/*.sh, /opt/IBM/TPC/agent/bin/agent.sh, \
/opt/IBM/TPC/service/*.sh, /opt/IBM/TPC/service/changepasswords, /opt/IBM/TPC/client_images/*.sh, \
/opt/IBM/TPC/cli/*.sh, /opt/IBM/TPC/data/scripts/logCleanup.sh, /opt/IBM/TPC/data/scripts/EncryptPassword.sh, \
/opt/IBM/TPC/data/server/tools/repocopy, /opt/IBM/TPC/data/server/tools/runTPCDBMaintenance, \
/opt/IBM/TPC/device/bin/linux/setenv.sh, /opt/IBM/TPC/device/bin/linux/enableapialerts.sh, \
/opt/IBM/TPC/device/bin/linux/disableapialerts.sh, /opt/IBM/TPC/wlp/bin/server, \
/opt/IBM/TPC/wlp/bin/securityUtility, /opt/IBM/TPC/jre/bin/keytool, /bin/kill

  • Cmnd_Alias IBMSC_UNINSTALL = /opt/IBM/TPC/_uninst/uninstall
The following examples show how to use the command aliases to provide non-root users privileges to the various commands: 
username1 ALL=(root) SETENV: IBMSC_INSTALL
username2 ALL=(root) SETENV: IBMSC_OPERATION
username3 ALL=(root) SETENV: IBMSC_UNINSTALL