Block Access to the Agent Installer Platform

You can block access to the Agent Installer Platform configuration file and still allow the agent to auto-instrument processes for authorized users or groups.

Change the default permissions:

  1. Define an authorized group.
    groupadd appdynamics-zero-agent
  2. Add users to the authorized group.
    For example, the usermod command adds a user named tomcat-user to the appdynamics-zero-agent group. Run this command for each user that creates Java processes you want the Agent Installer Platform to auto-instrument. 
    usermod -a -G appdynamics-zero-agent tomcat-user
  3. Navigate to the directory where the Agent Installer Platform was installed.
    The default directory is /opt/appdynamics/zeroagent.
    cd <zero-agent-install-directory>
  4. Change directories to the Agent Installer Platform's configuration file directory.
    cd configs
  5. Change the group ownership of the config.json to the authorized group created in Step 1. 
    chgrp appdynamics-zero-agent config.json
  6. Change the permissions associated with the config.json.
    chmod 640 config.json