To change which parts of the server file system that workflows and the vRealize Orchestrator API can access, modify the js-io-rights.conf configuration file. The js-io-rights.conf file is created when a workflow attempts to access the vRealize Orchestrator server file system.
- Log in to the vRealize Orchestrator Appliance command line as root.
- Navigate to the /data/vco/var/run/vco/ directory.
- Open the js-io-rights.conf configuration file in a text editor.
- Add the necessary lines to the js-io-rights.conf file to allow or deny access to areas of the file system.
For example, the following line denies the execution rights in the /data/vco/var/run/vco/noexec directory:
-x /data/vco/var/run/vco/noexec/data/vco/var/run/vco/noexec retains execution rights, but /data/vco/var/run/vco/noexec/bar does not. Both directories remain readable and writable.
You modified the access rights to the file system for workflows and for the vRealize Orchestrator API.