What are common installation steps for Symantec Endpoint Protection for Linux
Article ID: 161866
Updated On:
Products
Issue/Introduction
It is necessary to go through specific steps for the installation of the Symantec Endpoint Protection for Linux (SEPFL) agent.
Environment
Symantec Endpoint Protection for Linux 14.3 MP1 and below
Resolution
Supported Linux Kernels
Supported Linux kernels for Symantec Endpoint Protection for Linux (SEPFL) are listed in List of Linux distributions and kernels with precompiled Auto-Protect drivers and modules for Endpoint Protection for Linux 14.
Note: A minor variance in the kernel versions listed are still considered supported, however the SEP AutoProtect module may need recompiling. As in the possible SEP installer message, "The current kernel is not supported, if you want to make AutoProtect work properly, please switch to the folder 'src' under your install image, decompress the source code file and run build.sh to compile and install the drivers for AutoProtect." Recompiling the AutoProtect modules requires kernel-devel and other software development tools.
Linux Development Tools
Linux development tools may be necessary, if the SEPFL installer needs to recompile the AutoProtect module for your kernel version. Development tools are available from Linux installer discs or repositories. The tools package name varies, depending on the Linux release and version: e.g. kernel-devel, linux-headers, kernel-source, linux-source... See How to Manually compile Auto-Protect kernel modules for Endpoint Protection for Linux for more information.
Java
Oracle Java is not required by SEP 14 or newer.
In version 12.1 of SEP for Linux, Oracle Java (TM) 1.5 or later is required by LiveUpdate; Java 7 or 8 is required. Java 9 is not currently supported. The Java version command:
("[path_to_java]/bin/java -v") should identify as "Java HotSpot (TM)"
Note: OpenJDK, IcedTea, etc are not supported by SEP.
Java Cryptography Extension (JCE)
The matching Unlimited Java Cryptography Extension (JCE) files are also required by SEPFL; JCE files and installation instructions are downloadable at http://www.oracle.com/technetwork/java/javase/downloads/index.html#other.
The Java folder used by SEPFL must be owned by superuser. To set superuser ownership:
sudo chown -R root:root /usr/local/lib/jre-1.7.0_75/ # for example
32-Bit Linux Libraries
For both 32-bit and 64-bit Linux systems 32-bit libraries are required. These packages are required for SEPFL to function.
On CentOS or RHEL systems (yum), run the following commands:
sudo yum install glibc.i686 libgcc.i686 libX11.i686
On Debian or Ubuntu based systems (apt-get), run the following commands:
sudo dpkg --add-architecture i386
sudo apt-get install libc6:i386 libx11-6:i386 libncurses5:i386 libstdc++6:i386
sudo apt-get install lib32ncurses5 lib32z1
Disk Space
Symantec documented disk space requirements can lag behind the state of the product and the maximum size of a definition update download. Please ensure that sufficient disk space is available in /opt/ and /tmp/. According to most recent testing with SEP 12.1 RU6, total pre-installation space requirements are about 9GB for /opt/ and 1.5GB for /tmp/. The /tmp/ requirement and about 4GB of /opt/ are needed for working space when updating definitions.
Other
The SEP client Graphical User Interface (GUI) is optional, but it requires either KDE or Gnome graphical desktop environments in order to be installed for viewing. Also ncompress and sharutils packages are required by the Intelligent Updater, which can be obtained by the following Terminal command:
sudo yum install ncompress sharutils
Feedback
