Configuration Tool
Command line options
24
Limitations of using UseSudo=1
If you configure the cloud agent for UseSudo=1 to run commands using the sudo
escalation method, you may face any of the following issues:
- Commands run by the cloud agent or any script added in the cloud agent manifest, fail
to get the custom path set in the PATH environment.
- Scan results show empty values for service_list, bios_info, and service_info, when the
agents fails to find related path in the PATH environment.
This happens because when you set UseSudo=1, the agent tries to find the custom path in
the secure_path parameter located in the /etc/sudoers file. If this parameter is not set, the
agent then tries to find the custom path in the path that is used when you run sudo sh.
To resolve this issue, add your custom path or the path used by the agent while scanning
for service_list, bios_info, and service_info, to the secure_path parameter. If you have
disabled secure_path parameter, add the respective paths to the path that is used when
you run sudo sh.
Alternatively, you can configure the agent for UseSudo=0.
Note: For RHEL platforms, if you run argument UseSudo=0 with agent configuration tool
and do revocation, qualys-cloud-agent process is still running in background. Ideally,
qualys-cloud-agent process should have stopped after revocation. This is known
limitation with UseSudo=0 while it works for UseSudo=1.
ScanDelayPC (This is supported for Agent version greater than or equal
to 4.6) The time added to the start of pc scanning for new
installs and new manifest download. Default value is 0
(zero) and that means no delay added. Range is between 0
to 43200.
MaxRandomScanIntervalV
M
(This is supported for Agent version greater than or equal
to 4.6) This option will enabled the Agent to upload at the
configured VM scan interval and adding a randomized
interval. The random interval can be any value between 0
and the configured MaxRandomScanIntervalVM seconds.
MaxRandomScanIntervalVM can be set to any value
between 0 (default) to 43200.
MaxRandomScanIntervalPC (This is supported for Agent version greater than or equal
to 4.6) This option will enabled the Agent to upload at the
configured PC scan interval and adding a randomized
interval. The random interval can be any value between 0
and the configured MaxRandomScanIntervalPC seconds.
MaxRandomScanIntervalPC can be set to any value
between 0 (default) to 43200.
ProxyFailOpen Set the ProxyFailOpen to 1 to enable the proxy failover
behavior as described in the Multiple Proxy Server support
in Proxy URL (Linux Agent 2.5 or later) section.
Note: This is applicable for the Cloud Agent for Linux
version 6.2 and later.
Configuration option Description