Skip to main content

Linux / Unix

A localized space to talk about EPM, specifically for Unix & Linux.

  • 46 Topics
  • 8 Replies
46 Topics
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in Linux / Unix
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in Linux / Unix
Monthly Buzz - May - Privilege Management Unix Linux
Monthly Buzz - May - Privilege Management Unix Linux

How to Activate Policy Caching for EPM-UL Below are the steps to activate policy caching for Endpoint Privilege Management for Unix and Linux (EPM-UL) , to convert clients to cached clients. These steps are specific to clients and not servers and can only be performed on on-premise versions of EPM-UL. The SaaS version (EPM-L) requires a full build on the clients if switching. Note: These steps cannot be performed on the SaaS version (EPM-L, this will result in a conflict error"{noformat}# rpm -Uv ./epml-cachedclient.x86_64.rpmerror: Failed dependencies:epml-client conflicts with epml-cachedclient-25.1.0.04-1.x86_64epml-cachedclient conflicts with (installed) epml-client-25.1.0.04-1.x86_64{noformat}"the non-cached client will need to be uninstalled and reinstalled as a cached client. 

330
B
Community Manager
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in Linux / Unix
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in Linux / Unix
Monthly Buzz - April - Privilege Management Unix Linux
Monthly Buzz - April - Privilege Management Unix Linux

Introducing Pathfinder BeyondTrust is introducing Pathfinder, our new unified interface that brings together our powerful security solutions under a single login and integrated experience for operational agility that brings shared context across all our products. This interface will enable organizations to better manage identity security across their heterogeneous environments and ensure critical assets are protected from all angles. Security teams will benefit with a unified platform for faster incident response, intelligent recommendations, and streamlined workflows to reduce risks and gain operational efficiency. Managing cybersecurity in today’s complex threat landscape requires a comprehensive, integrated approach that enables security teams to effectively find, control, and protect all paths to privilege.  For more information, please check out our press release and platform page:

470
B
Community Manager
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in Linux / Unix
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in Linux / Unix
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in Linux / Unix
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in Linux / Unix
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in Linux / Unix
P
BeyondTrust Employee
Phillip LBeyondTrust Employee
published in Linux / Unix
Customer Success Quarterly - 2025-Q1 - Privilege Management Unix Linux
Customer Success Quarterly - 2025-Q1 - Privilege Management Unix Linux

 Greetings! I'm Phillip Lehner, the Senior Director of Education at BeyondTrust, and I'm thrilled to lead our efforts in delivering exceptional learning experiences. I'm excited to share how we're elevating your journey with a new, streamlined method of accessing training: Success Included with BeyondTrust University.      At BeyondTrust University, we believe our customers deserve nothing short of excellence in the tools they use. That’s why we’ve launched 'Success Included' — to elevate your learning experience and ensure you achieve success with BeyondTrust’s solutions.  Success Included is an education program that makes foundational knowledge accessible to customers at no additional cost. It features easy-to-follow, self-paced eLearning courses that empower system administrators to configure and manage BeyondTrust products using industry best practices. Our goal is to equip learners with the knowledge n

750
P
BeyondTrust Employee
The Fabulous Leon Robinson
BeyondTrust Employee
The Fabulous Leon RobinsonBeyondTrust Employee
posted in Linux / Unix
Logging keypresses of unprivileged command line sessions

EPM-L and EPM-UL have extensive ability to log privilege access and sessions. You can use the pbsh and pbksh to log and record unprivileged session, however the problems with that are twofold. Firstly, the pb-shell environments are incompatible with Advanced Control and Audit rules, and secondly, the shell environments are out-of-date compared to modern shell environments. They lack modern features like command argument completion, wildcard completion, directory history stack and others due to their age. Maybe a modern shell environment like bash, zsh or fish will get integrated into the product.The first issue is easily taken care of by normal DAC file system permissions, they are unprivileged users after all. The second issue is more complex and could be solved by just forcing people to use pbksh, but there is a method of logging which is secure, and respects the

780
The Fabulous Leon Robinson
BeyondTrust Employee
raymondus
raymondusRising Star
asked in Linux / Unix
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in Linux / Unix
M
malipeddiNewcomer
asked in Linux / Unix
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in Linux / Unix
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in Linux / Unix
Devin Churchill
BeyondTrust Employee
Devin ChurchillBeyondTrust Employee
published in Linux / Unix
Customer Success Quarterly - 2024-Q4 - Privilege Management Unix Linux
Customer Success Quarterly - 2024-Q4 - Privilege Management Unix Linux

Hello! Last month our Chief Customer Officer, Sean Cashin, provided some information on our upcoming dedicated user community. I’m excited to announce that BeyondTrust launched our new BeeKeepers community on Monday, September 16th! Why BeeKeepers?The name BeeKeepers was born from the idea to protect and secure privileged identities, along with the paths those identities follow in order to gain privilege, aka Paths to Privilege. What does the BeeKeepers name mean to us?Imagine a company’s data and secrets as the honey in a beehive. BeeKeepers take care of the hive, protecting the honey and honeybees, from predators the live to steal the honey, damaging and destroying the hive. Now imagine you, BeyondTrust customers, IT Admins, SOC professionals, and CISOs are the BeeKeepers! And honeybees are identities – human and non-human – continuously travelling along their flight paths, the Path

640
Devin Churchill
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in Linux / Unix
P
postuserApprentice
asked in Linux / Unix
rauch
BeyondTrust Employee
rauchBeyondTrust Employee
posted in Linux / Unix
PMUL Safe useradd functionality

One of the things that becomes a big issue for customers, especially when we move to automated build processes, is “how do you allow a user to add/remove users or groups, but NOT allow them to add ‘root-capable’ accounts, or elevate their own access?” As has been well discussed in other forums such as OWASP: https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html - input validation is very difficult to do properly, especially if all you’re doing is checking “are these options included in the input?”  A lot of customers will simply try to grep the options for dangerous flags or mis-uses, but as documented above, this is not safe - a re-implementation of the commandline parsing is typically required for security.For a customer this month, we built a “pbuseradd” function that re-implements the “useradd” com

690
rauch
BeyondTrust Employee
Sean Cashin
BeyondTrust Employee
Sean CashinBeyondTrust Employee
published in Linux / Unix
BeyondTrust Quarterly Update - 2024-Q3 - Privilege Management for Unix and Linux
BeyondTrust Quarterly Update - 2024-Q3 - Privilege Management for Unix and Linux

Hello All,Leaning into the cliché, it’s hard to believe the year is half over already. As I'm sure is true for many of you, this has been a year of hard work and big changes at BeyondTrust. At the beginning of the year, I stepped into the role of Chief Customer Officer and welcomed both Mike Machado and Brett Thiess to the team as CISO and CMO, respectively. We also welcomed Ron Nissim and his team into the BeyondTrust family with the acquisition of Entitle, expanding BeyondTrust’s stance as an Identity Security leader! As the CCO, my passion and focus are on ensuring that our customers not only adopt but get real value from our products – securing their Identity landscape, minimizing the risk of threat actors, and limiting the blast radius of any incidents. Your thoughts and experiences are a key piece of guidance for us; from your NPS responses and feedback on your interactions with teams like support and services, to your engagement on changes we’ve made to p

2350
Sean Cashin
BeyondTrust Employee

Badge Earners

  • BCA: Password Safe
    HoMosanYhas earned the badge BCA: Password Safe
  • BCIE: Password Safe
    HoMosanYhas earned the badge BCIE: Password Safe
  • BCIE: Password Safe
    lucasmobilehas earned the badge BCIE: Password Safe
  • BCA: Endpoint Privilege Management - Windows
    Drew Hollingshas earned the badge BCA: Endpoint Privilege Management - Windows
  • BCA: Password Safe
    Richas2513has earned the badge BCA: Password Safe
Show all badges
Terms & ConditionsCookie settingsAccessibility statement