Agent updater don't start on hardened Linux machines

[andreas-doehler (Andreas)]

CMK version:
2.0.0p27
OS version:
SLES 12SP5 // SLES 15SP3
Error message:
After start of cmk_update_agent →
Error while loading shared libraries: libz.so.1: failed to map segment from shared object: Operation not permitted

Cause:
/tmp is a fileystem what mounted with “noexec” flag for security reason

Workaround:
remount the /tmp with exec priviledge

mount /tmp -o remount,exec

But this is no real solution as the noexec is set as a security setting.
Suggestions for solutions are welcome.

[r.sander (Robert Sander)]

With the ruleset “Installation paths for agent files (Linux, UNIX)” you can set individual TMPDIR variables for the Linux agents. The content of this variable will be used instead of /tmp.

[andreas-doehler (Andreas)]

Thanks one option more that i not used before
Only one addition for the registration you need to manually export the TMPDIR variable.

[r.sander (Robert Sander)]

@andreas-doehler

for the registration you need to manually export the TMPDIR variable.

This should be filed as a bug report.