Managed Software Delivery Policy for Unix, Linux and Mac leaves Compliance status as 'Not Compliant'

Products

• Notification Server Agent for Macintosh (Altiris)
• Notification Server Agent for Unix/Linux (Altiris)

Issue/Introduction

After running a Managed Software Delivery (MSD) policy on a Unix, Linux or Mac (ULM) client and installing software, the Compliance status remains 'Not Compliant'. The policy, if set on a repeating schedule, will continue to reinstall the software each time the policy runs. 

In the SMP Agent GUI, within the 'Managed SWD Policies' section, the Compliance status is always 'Not Compliant' and the policy may rerun and reinstall the software.  

Cause

The Inventory Rule process, which is used by an MSD to find installed software and determine compliance, relies on various data points from the installed packages to determine the location of installed software. For example, on a Mac, the Inventory Rule process runs the pkgutil utility to get this data. Following is sample output from the pkgutil utility:

• package-id: com.symantec.sepapplication
• version: 12.1.6168.6000.0.1
• volume: /
• location: 
• install-time: 1439928615

 

Note that in this case, the 'location' is blank because the vendor did not provide that value. Because of the missing data, the Inventory Rule cannot determine where to look for the corresponding installed software. 

Resolution

Important Note: Two point fixes are provided. One is for 7.6 HF5 only and the other is for 7.6 HF7 only. This fix will be included in ITMS 8.0. 

1. 7.6 HF5: Filename: 20160106_76HF5_PF_3885791_MSD_Rule_Compliance.zip. The point fix version of the Inventory Rule agent will be 7.6.1636. 
2. 7.6 HF7: Filename: 20160203_76HF7_PF_3900684_MSD_Rule_Compliance.zip. The point fix version of the Inventory Rule agent will be 7.6.1655.

 

This point fix provides an update to the Inventory Rule agent, a component of the main SMP Agent, for all Unix, Linux and Mac clients. All other components of the SMP agent will remain at 7.6.1635. 

To install this combined point fix: 

1. Log into the Notification Server as administrator
2. Download and unarchive the appropriate point fix file, below. 
3. Run PFinstaller2.exe as Administrator (right-click and select 'Run as administrator' if not already logged on as the administrator). 
4. In the subsequent window, click the "Install files" button.
5. When that is completed, open the Windows Task Scheduler and run "NS.Package Distribution Point Update Schedule" and "NS.Package Refresh" (right-click on each name and select 'run').
6. After that is completed, enable the Symantec Management Upgrade policy in the NS Console, found at: Settings, All Settings, Agents/Plug-ins, Symantec Management Agent, UNIX/Linux/Mac. 

To Uninstall this point fix:

1. Make sure that Backup subfolder is located in PFinstaller2 directory. (This was created when the pfinstaller2.exe ran initially.)
2. Execute PFInstaller2.exe with administrative privileges (right-click > Run as administrator).
3. Accept UAC (User Account Control) prompt
4. Select Uninstall Files.