Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: How to Designate a Policy At Install on Linux Sensors

Carbon Black Cloud: How to Designate a Policy At Install on Linux Sensors

Environment

  • Linux: All Supported Versions
  • Carbon Black Cloud Linux Sensor: 2.8.3.300614 and later

Objective

How to assign a policy to the Carbon Black Cloud sensors for Linux at install

Resolution

Follow the steps below:
  1. Install the sensor
sudo ./install.sh
  1. Update cfg.ini with the desired policy name (please note GroupName refers to a policy name)
echo 'GroupName=Linux Policy' | sudo tee -a /var/opt/carbonblack/psc/cfg.ini
  1. Populate the company code enclosing the company code in single quotes, this will populate the line "CompanyCode" in cfg.ini with the corresponding code
sudo /opt/carbonblack/psc/bin/cbagentd -d 'company_registration_code'
  1. Confirm the changes took place
cat /var/opt/carbonblack/psc/cfg.ini
  1. Start the sensor daemon
sudo systemctl start cbagentd



 

Additional Notes


Upon completing the steps above, the sensor will display "Manually Assigned" as its group and the policy as defined by GroupName above.
IMPORTANT:  This process should only be done prior to first checkin/sensor start.  Doing this process after initial check/registration can cause "duplicate key error" and sensor disconnect.  

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-29-2020
Views:
1687
Contributors