Installing and Configuring CxEngine under Linux

A standalone Engine can be deployed and used in the following ways:

The distributed Engine Service package contains an executable script: run.sh

Edit environment variables in the script so that they are appropriate for the deployment environment.

The variables are explained in the Configuration section.

After editing the file, execute run.sh

When the Engine Service starts successfully, it displays the following lines:

Now listening on: http://[::]:8088

Application started. Press Ctrl+C to shut down.

The CxSAST Engine can configured to run as a system service so that it runs automatically any time the system is restarted.

The distributed Engine Service package contains the following files that are required for registering the service in systemctl:

Edit the environment variables in the cxengine.service configuration file so that they are appropriate for the deployment environment.

Change the environment variables in the file. The variables are explained in the Configuration section.

After editing the configuration file, execute install.sh

To verify the service is running, use the following command: sudo systemctl status cxengine

Edit the following environment variables in the configuration files to match the deployment environment of the product:

There are two differences between Linux and Windows:

Already starting with CxSAST 9.2, an additional CxQL API has been introduced, the cxEnv. By using this API variable, queries can be written in a cross-platform format in order to support both operating systems.

There are 6 properties to be used in cxEnv:

For a full description of each variable, refer to the latest CxQL API guide.

All custom queries must use the above-listed variables rather than the actual values to run on both platforms and all their flavors.

The following section illustrates two examples.

string[] path = fileName.Split('\\');

string[] path = fileName.Split(cxEnv.Path.DirectorySeparatorChar);

elseIfs.FindByRegex(@"[\W]if[^;\{]*{[^\}]*}[(\s)(\r\n)]*else[(\s)(\r\n)]*{[^\}]*?[(/\*)(//)]");

elseIfs.FindByRegex(@"[\W]if[^;\{]*{[^\}]*}[(\s)(" + cxEnv.NewLine + @")]*else[(\s)(" + cxEnv.NewLine + @")]*{[^\}]*?[(/\*)(//)]");