5.8

n CSISecureHigh
Errors from the RunHigh executable file, indicating violation of rules enforced by the suid program
for running root privilege inspections.
n CSISecureLow
Errors from the RunLow executable file, indicating violation of rules enforced by the sgid program for
running non-root privilege inspections.
n CSISecure
Errors from the RunRemote executable file, indicating violation of rules enforced by the suid program
for running root privilege remote commands. The File Upload job also uses this executable file when it
needs to copy a file that has restricted permissions.
CSISecure messages are deliberately unhelpful in debugging because they would otherwise expose
the rules being enforced.
NOTE An error is logged if you run any of the executable files manually.
Look for the following problem areas.
n The user who is configured to run the Agent is not a member of the cfgsoft group.
n The user who is configured to run the Agent does not have the cfgsoft group as the default group.
n The user who is configured to run the Agent has a no-login shell.
If inspections are not returning all of the expected information, examine the DBE file from the Collector
request-ID directory. The file captures errors reported to the stderr of the gawk inspector. Messages
will be from the ReadInternal function of the CEcmScriptResultStream class and indicate which data
class was being processed at the time. The error might span several sequential messages.
Save the ZRP File at the Collector
If the Agent returns a ZRP file to the Collector, debug events are logged to the SQL database, and you can
view them there. To preserve the source of the errors, prevent the ZRP file from being deleted after
processing.
Procedure
1. In the VCM Console, select Administration.
2. Click Settings > General Settings > Database.
3. Select one of the following options.
SAS: Should SAS data files be kept on the disk after they have been processed
ETL: Should ETL data files be kept on the disk after they have been processed
4. Look for saved Results.zrp files in a request ID directory under the DSRoot directory.
Run Executable Permissions
The Collector might report that the job succeeded, but show no data. For data to appear, executable files in
/opt/CMAgent/ECMu/x.x/bin need the following permissions.
NOTE The csi_acct name might be different if the Agent is installed using a different account.
VCM Troubleshooting Guide
76
VMware, Inc.