No sudo on FortiNAC anymore?

[AEK]

Hi FNAC admins and 

It seems on FortiNAC-F 7.4 and 7.6 (didn't test on 7.2), when doing enter-shell the user admin can't do sudo.

Is there a special way to do that or has it just been removed?

[ebilcari · Accepted solution]

In FNAC-OS, full root access via the shell is no longer possible. However, certain specific commands can still be executed using 'sudo' without requiring a password, such as:

sudo tcpdump port 1812 -vn

sudo grab-log-snapshot

sudo journalctl

sudo /bin/cmdb/upgrade FNAC_ESX-v7.4.1-build0451-FORTINET.out

[AEK]

Thanks for your feedback, Emirjon.

Farewell full access but indeed this is a very good security measure for such critical alliance.