Client settings for Non-Windows Patch

Settings applicable to all BigFix supported Linux operating systems

_BESClient_LinuxPatch_enable_debug_log

Enables or disables DEBUG mode for deployment logs (EDR_DeploymentResults.txt), which are generated on the BigFix client (/var/opt/BESClient/EDRDeployData) during patching. When enabled, the setting also generates or deletes EDR deployment files such as EDR_Yumconfig, EDR_RepomdRequest, EDR_RepomdMapping, EDR_RepoRefresh, EDR_MetadataRequest, and EDR_MetadataMapping on the client after patching.

_BESClient_ActionManager_PrefetchPlugInTimeoutSeconds

Customizes the amount of time, in seconds, that the client waits after running a prefetch plug-in for the plug-in to generate an answer.

_BESClient_LinuxPatch_metadata_directory

Specifies the local directory where BigFix Linux Patching stores or accesses the patch and repository metadata that is required during patch evaluation and patching. If the /var directory has limited disk space, configure this setting to use an alternative directory with sufficient available space.

_BESClient_LinuxPatch_executable_directory

Specifies an alternative absolute directory from which the BigFix Linux patching executables are stored and run. Use this setting when the default location under /var cannot execute binaries, for example when /var is mounted with the noexec option.

Red Hat Enterprise Linux

_BESClient_RHEL_AllowYumDownloads

When set to 1, the BigFix client uses YUM/DNF to download patches directly from the configured Red Hat repositories on the endpoint. When set to 0, patches are downloaded through the BigFix RHSM Download Plugin.

Ubuntu

_BESClient_Ubuntu_AllowAPTDownloads

When set to 1, the BigFix client uses APT to download patches directly from the configured Ubuntu repositories on the endpoint. When set to 0, patches are downloaded through the BigFix server.

_BESClient_Ubuntu_EnableSupersededEval

Enables evaluation of superseded Fixlets on the endpoint. When enabled, superseded Fixlets can become relevant if the endpoint still requires the older content. Superseded Fixlet relevance is reevaluated every 6 hours.

_BESClient_Ubuntu_AddNoRemove

Prohibits conflicting package removal during upgrades by adding --no-remove to the apt-get install command. By default, the --no-remove option is not included in the apt command during an upgrade.

Debian

_BESClient_Debian_AllowAPTDownloads

When set to 1, the BigFix client uses APT to download patches directly from the configured Debian repositories on the endpoint. When set to 0, patches are downloaded through the BigFix server.

_BESClient_Debian_EnableSupersededEval

Enables evaluation of superseded Fixlets on the endpoint. When enabled, superseded Fixlets can become relevant if the endpoint still requires the older content. Superseded Fixlet relevance is reevaluated every 6 hours.

SUSE Linux Enterprise and openSUSE Leap

_BESClient_SLE_AllowZypperDownloads

When set to 1, Zypper uses the local repositories that are configured on the endpoint to download patches. When set to 0, patches are downloaded through the BigFix Download Plugin instead of directly through Zypper.

_BESClient_OpenSuSE_EnableSupersededEval

Enables evaluation of superseded openSUSE Fixlets on the endpoint. When enabled, superseded Fixlets can become relevant if the endpoint still requires the older content. Superseded Fixlet relevance is reevaluated every 6 hours.

Oracle Linux

_BESClient_OEL_AllowYumDownloads

Set to 1 to allow YUM/DNF to use its configured external or local repositories (such as a custom mirror) for dependency resolution and package downloads. Set to 0 to rely strictly on the native BigFix download mechanisms and relays.

_BESClient_OEL_RestrictUEK

Explicitly enables Oracle Linux UEK kernel Fixlets for a specific UEK version. Setting this value makes only the matching UEK kernel Fixlets applicable on the endpoint, while disabling other UEK versions and non-UEK kernel Fixlets. Removing the setting restores the default behavior, where only non-UEK kernel Fixlets are applicable. For more information, see Patch Using Kernel Fixlets.

_BESClient_OEL_EnableSupersededEval

Enables evaluation of superseded Oracle Linux Fixlets on the endpoint. When enabled, superseded Fixlets can become relevant if the endpoint still requires the older content. Superseded Fixlet relevance is reevaluated every 6 hours.

Rocky Linux

_BESClient_RockyLinux_AllowYumDownloads

Set to 1 to allow YUM/DNF to use its configured external or local repositories (such as a custom mirror) for dependency resolution and package downloads. Set to 0 to rely strictly on the native BigFix download mechanisms and relays.

_BESClient_RockyLinux_EnableSupersededEval

Enables evaluation of superseded Rocky Linux Fixlets on the endpoint. When enabled, superseded Fixlets can become relevant if the endpoint still requires the older content. Superseded Fixlet relevance is reevaluated every 6 hours.

Amazon Linux

_BESClient_AmazonLinux_AllowYumDownloads

Set to 1 to allow the BigFix Linux patching process to use the YUM/DNF repositories that are configured on the endpoint for package downloads and dependency resolution. Set to 0 to prevent BigFix from using the endpoint's YUM/DNF repositories and to rely on the applicable BigFix download mechanism instead.

_BESClient_AmazonLinux_AllowDnfDownloads

Set to 1 to allow the BigFix Linux patching process to use the DNF repositories that are configured on the endpoint for package downloads and dependency resolution. Set to 0 to prevent BigFix from using the endpoint's DNF repositories and to use the applicable BigFix download mechanism instead.

AIX

_BESClient_Inspector_RPMDisableCache

Disables the RPM inspector cache. This setting is relevant for AIX patching and inventory. Setting it to 1 might degrade client performance if the ODM (Object Data Manager) cache is disabled.

_BESClient_ActionManager_LocaleEnable

Enables or disables locale support for ActionScript execution. It is commonly used during AIX package deployments to ensure correct system variables.

_BESClient_Custom_PatchesForAIX_NFS_Repo

Specifies the local directory where BigFix AIX patching metadata and payloads can be mounted from a remote NFS repository, allowing the client to install patches without fully downloading them into the local cache.

_BESServerRelay_Download_Plugin_AIXProtocolR2

Registers and operates the AIX Download Plug-in R2 on the BES Server or Relay. It enables dynamic protocol routing and fetching of AIX patch payloads from IBM servers directly through the relay chain.

VIOS

_BESClient_Custom_PatchesForVIOS_NFS_Repo

Specifies the local directory where BigFix VIOS patching metadata and packages can be mounted through an NFS repository, to avoid using local disk space for large payloads.

Mac OS

Mac OS patching does not require OS-specific patch repository settings. By default it uses the BigFix Agent's global download pipeline (macOS 10.14 and later).

_BESClient_Download_DynamicThrottleEnabled

Because Mac patches are often fetched dynamically, this setting enables dynamic download throttling so that large OS updates do not saturate network bandwidth.