VOLTTRON / volttron

VOLTTRON Distributed Control System Platform
https://volttron.readthedocs.io/
Other
452 stars 217 forks source link

Agents does not start in agent isolation mode unless volttron user had password less sudo for all command #3117

Open schandrika opened 10 months ago

schandrika commented 10 months ago

To reproduce.

  1. Use a unix user without any sudo access for the below steps
  2. Enable a agent isolation mode in volttron instance as described in https://volttron.readthedocs.io/en/main/platform-features/security/agent-isolation-mode.html and start volttron
  3. Install agent
  4. Start agent. Agent will fail to start and user will get prompted for sudo password on command line

Environment

python 3.10 on Ubuntu

Fix

Update secure_user_permissions.sh script to update sudoers file with the correct restricted sudo access to unix user used to run agent