Operational Defect Database

BugZero found this defect 3017 days ago.

Veeam | kb2099

Script execution on Linux target fails with “Permission Denied” even when executed as root.

Last update date:

4/29/2022

Affected products:

Veeam Backup & Replication

Affected releases:

ALL

Fixed releases:

No fixed releases provided.

Description:

Challenge

When interacting with Linux servers, Veeam Backup & Replication may encounter a “Permission Denied” error during script execution (Pre-freeze, post-thaw, and repository data mover agent scripts), even when the account being used is the root user.

Cause

All script files are uploaded to and executed from /tmp, which may be mounted with the “noexec” attribute. Veeam uses the path /tmp to store temporary files in keeping with the Filesystem Hierarchy Standard.

Solution

If there is an entry for the mount point /tmp with the attribute noexec, the /etc/fstab will need to be edited to remove this attribute.

More Information

Advanced Alternate Solution If, for security reasons, it is not feasible to disable noexec on the /tmp folder, you may create the following registry value on the Veeam Backup Server to assign a different folder to be used. This change will change the path Veeam Backup & Replication uses when communicating with all Linux servers. If you use this registry setting, you must ensure that the folder path specified in the registry value exists on every Linux server that Veeam will communicate with. If not, some tasks/jobs will failExamples: • Oracle Guest Processing • Pre-Freeze/Post-Thaw Scripts • File Level Restore as they will not attempt to create the folder path. Key Location: HKLM\SOFTWARE\Veeam\Veeam Backup and Replication\ Value Name: LinAgentFolder Value Type: String (REG_SZ) Value Value Data:  The Value Data specified must be a path without the trailing slash Example: /folder/subfolder   ✔ /folder/subfolder/   ✘ Reference Information: $TMP and $HOME variables can be used default execute directory /tmp for Linux servers

Additional Resources / Links

Share:

BugZero® Risk Score

What's this?

Coming soon

Status

Solved

Learn More

Search:

...