Block Access to the Agent Installer Platform

You can block access to the Agent Installer Platform configuration file and still allow the agent to auto-instrument processes for authorized users or groups.

Change the default permissions:

  1. Define an authorized group.
    CODE 
    groupadd appdynamics-zero-agent
  2. Add users to the authorized group.
    For example, the usermod command adds a user named tomcat-user to the appdynamics-zero-agent group. Run this command for each user that creates Java processes you want the Agent Installer Platform to auto-instrument.
    CODE 
    usermod -a -G appdynamics-zero-agent tomcat-user
  3. Navigate to the directory where the Agent Installer Platform was installed.
    The default directory is /opt/appdynamics/zeroagent.
    CODE 
    cd <zero-agent-install-directory>
  4. Change directories to the Agent Installer Platform's configuration file directory.
    CODE 
    cd configs
  5. Change the group ownership of the config.json to the authorized group created in Step 1.
    CODE 
    chgrp appdynamics-zero-agent config.json
  6. Change the permissions associated with the config.json.
    CODE 
    chmod 640 config.json