Linux Agent Folder Structure

Modified on Mon, 13 Jul at 3:13 AM
Summary

This article describes the Linux agent folder structure, detailing the purpose of each directory and important files required for agent operation, logging, updates, and configuration.
Folder Structure and Description

/etc/saner/                  # Agent configuration and commands
├── accountinfo.ini           # Agent account information
├── agent_md5sum.txt          # MD5 checksum of agent binaries
├── assertion.key             # Security key for authentication
├── build/                    # Build-related files
├── cacert.pem                # CA certificate
├── commands/                 # Agent command modules
│   ├── agentupgrade/         # Agent upgrade commands
│   ├── configurationmanagement/ # Configuration management commands
│   ├── remediationrules/     # Remediation rules
│   │   ├── ea56ac9e-3a8c-4e47-b090-87cf07a511d2.zip
│   │   ├── f1101c01-3ebd-4b76-a111-8e226fd962de.zip
│   │   └── fbb7d9ee-5444-4fcf-9435-dba0b5cf7c96.zip
│   ├── responsedata/         # Agent response data
│   │   ├── ea56ac9e-3a8c-4e47-b090-87cf07a511d2.txt
│   │   ├── f1101c01-3ebd-4b76-a111-8e226fd962de.txt
│   │   ├── fbb7d9ee-5444-4fcf-9435-dba0b5cf7c96.txt
│   │   ├── serviceprovision.txt
│   │   └── uninstallaccpwd.txt
│   ├── responsedata.ini
│   ├── scan_configuration/
│   ├── serviceprovision/
│   │   ├── serviceprovision.json
│   │   └── serviceprovision.zip
│   └── uninstallaccpwd/
│       ├── uninstallaccpwd.json
│       └── uninstallaccpwd.zip
├── public.key                # Public key for verification
├── settings.ini              # Agent settings
├── status.ini                # Agent status info
└── Upgrader/                 # Upgrade-related files

/var/log/saner/               # Log files
├── spdetailscan.log
├── spsaneragent.log
├── spsaneraudit.log
├── spscanmanager.log
└── spupgradecontroller.log

/var/saner/                   # Agent runtime data and updates
├── backup/                   # Backup scan results
│   ├── dsi-scanresults.zip
│   ├── missingpatch-scanresults.zip
│   └── scanresults.zip
├── data/                     # Runtime data
│   ├── bufferedpatches/
│   ├── commandstatus.ini
│   ├── dsi/
│   ├── ir/                   # Incident Response scripts
│   │   └── ircmd.sh
│   ├── networkscanner/
│   │   └── status.ini
│   ├── probefilters/         # Probe filters and profiles
│   │   ├── networkscannerfilters.json
│   │   ├── probefilters.json
│   │   ├── probes.ini
│   │   ├── profiles.json
│   │   ├── unix-profiles.zip
│   │   └── unix_patchinfo.json
│   ├── remediation/          # Remediation jobs and rules
│   │   ├── job/
│   │   │   └── remediationjob.ini
│   │   ├── missingpatchinfo.ini
│   │   └── rule/
│   │       └── remediationrule.ini
│   ├── rolemanager.ini
│   └── rollback/
└── updates/                  # Updates and patches
    ├── compliance/
    ├── nonsecuritypatch/
    ├── remediation/
    ├── saner-tools/
    ├── scanprofiles/
    └── vulnerability/

/usr/lib64/saner/             # Agent libraries
├── libagentwd.so
├── libspsanercontroller.so
├── libspprobe.so
├── libspremedy.so
├── libspsanerminex.so
├── libspsanerrolemanager.so
├── libspscanner.so
├── libspscheduler.so
├── libspsystemmonitor.so
├── libsputils.so
├── libspvaultmgmt.so
├── libspxmlsax.so
├── tools/                    # Helper libraries
│   ├── libspsanerupgrader.so
│   └── liblog4cpp.so.2.9

/usr/bin/                     # Agent executables
├── spsaneragent
├── spsaner.uninstall
├── spsaner_servicelauncher
├── spscanmanager
├── spmessagebox
├── spagentwatchdog
├── spupgradecontroller
├── spupgrade_servicelauncher
├── spsaner_upgrade

/opt/saner/remoteconnector/   # Remote connector files
├── agentAnswer.json
├── offer.json
└── remoteconnector.log