SEP for Linux: "Permission denied" in sepjlu-install.log and LiveUpdate failures.

Products

• Endpoint Protection

Issue/Introduction

GUI error "Warning: LiveUpdate failed"

Command-line errors: "Command failed: Problem with LiveUpdate", "Check that java directory is in PATH", "Unable to perform update"

Note that the GUI and command-line errors above are generic; there is frequently nothing wrong with java, and the errors above could be due to any number of reasons not described in this article.

More specifically for the problem described in this article:

liveupdt.log will display a repeating series of entries:

Apr 1, 2015 11:32:26 AM There was a failure in reading the settings from the .conf file.
Apr 1, 2015 11:32:26 AM org.bouncycastle.jce.provider.BouncyCastleProvider
Apr 1, 2015 11:32:26 AM JLU received a DeleteSetting command.

... and sepjlu-install.log will indicate a "Permission denied" error:

Java LiveUpdate version 3.10 Build 26.
Extracted out unixinstall.sh to /tmp/1427202521861/unixinstall.sh.
Extracted out unixuninstall.sh to /tmp/1427202521861/unixuninstall.sh.
Extracted out liveupdate.conf to /tmp/1427202521861/liveupdate.conf.
Extracted out bcprov-jdk15on-148.jar to /tmp/1427202521861/bcprov-jdk15on-148.jar.
Copied /opt/Symantec/LiveUpdate/jlu.jar to /tmp/1427202521861/jlu-3.10.0.26.jar.
Error running /tmp/1427202521861/unixinstall.sh with reason: java.io.IOException: Cannot run program "/tmp/1427202521861/unixinstall.sh": error=13, Permission denied.

Cause

This is caused when /tmp is mounted with the noexec option, for security purposes.

Resolution

This has been fixed in SEP 12.1 RU6 MP4; it is no longer necessary to remount /tmp for the SEP installation.

A workaround in older SEP versions is to temporarily remount /tmp with exec option, re-run the SEP installer, and remount /tmp again with noexec if desired.