Auto-compile for Symantec Endpoint Protection client for Linux

Products

• Endpoint Protection

Issue/Introduction

NOTE: This article only applies to SEP for Linux versions 14.3 MP1 (build 14.3.1169) or older.

Resolution

As of 12.1.6, the Symantec Endpoint Protection client installer for Linux auto-compiles the Auto-Protect kernel module when the operating system kernel is not compatible with the precompiled Auto-Protect kernel modules.

Near the end of the installation process, if the client installer detects no active Auto-Protect modules, it launches the auto-compiler, which runs to compile the compatible modules.

Previously, Auto-Protect only functioned when the Linux computer's operating system ran a supported kernel. Alternately, you could manually compile the Auto-Protect kernel module.feature.

Prerequisites

Development tools must be present on the Linux client computer for auto-compile to function, such as:

• kernel-devel
• kernel-source
• linux-headers
• build-essentials
• "Development Tools"

For more information: Manually compile Auto-Protect kernel modules for Endpoint Protection for Linux

Symantec Endpoint Protection kernel modules may not successfully compile on those Linux kernels whose source has been changed. Such Linux kernels are not supported through this feature.

Using auto-compile

Auto-compile automatically launches during installation if needed. You do not need to take any action to invoke auto-compile.

If auto-compile successfully completes, the terminal window displays the following:

Build Auto-Protect kernel modules from source code successfully

Custom drivers for symap and symev that are created by auto-compile include custom in the filename. The file sepfl-install.log also confirms that auto-compile has run and succeeded. By default, this file is saved to ~/.

If auto-compile fails, Auto-Protect installs but remains disabled. The terminal window displays a message similar to the following:

Build auto-Protect kernel modules from source code failed with error: Number

Number represents the number of the error code, which varies. Refer to your compiler's documentation for information on any error code you receive.