To change which parts of the server file system that workflows and the vRealize Orchestrator API can access, modify the js-io-rights.conf configuration file. The js-io-rights.conf file is created when a workflow attempts to access the vRealize Orchestrator server file system.

Procedure

  1. Log in to the vRealize Orchestrator Appliance command line as root.
  2. Navigate to the /data/vco/var/run/vco/ directory.
  3. Open the js-io-rights.conf configuration file in a text editor.
  4. Add the necessary lines to the js-io-rights.conf file to allow or deny access to areas of the file system.
    For example, the following line denies the execution rights in the /data/vco/var/run/vco/noexec directory: 
    -x /data/vco/var/run/vco/noexec
    /data/vco/var/run/vco/noexec retains execution rights, but /data/vco/var/run/vco/noexec/bar does not. Both directories remain readable and writable.

Results

You modified the access rights to the file system for workflows and for the vRealize Orchestrator API.