search cancel

Symantec Endpoint Protection for Linux' services are shown to be inactive (dead) after compiling Auto-Protect kernel module against a generic 4.4.0 kernel

book

Article ID: 163771

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction


Symantec Endpoint Protection for Linux' services are shown to be inactive (dead) after compiling Auto-Protect kernel module against a generic 4.4.0 kernel, which succeeds but shows a number of warnings.

SEPFL:~# service smcd status
● smcd.service - LSB: Symantec AntiVirus Scanner
   Loaded: loaded (/etc/init.d/smcd; bad; vendor preset: enabled)
   Active: inactive (dead)
     Docs: man:systemd-sysv-generator(8)

Sep 14 12:55:26 crtqa-virtual-machine systemd[1]: smcd.service: Failed with result 'exit-code'.
Sep 14 12:55:26 crtqa-virtual-machine systemd[1]: Starting LSB: Symantec AntiVirus Scanner...
Sep 14 12:55:28 crtqa-virtual-machine smcd[12781]: --- smcd started (pid 12781) ---
Sep 14 12:55:28 crtqa-virtual-machine smcd[12781]: smcd running as daemon
Sep 14 12:55:30 crtqa-virtual-machine systemd[1]: Started LSB: Symantec AntiVirus Scanner.
Sep 14 12:55:30 crtqa-virtual-machine smcd[12664]: [24B blob data]
Sep 14 12:55:59 crtqa-virtual-machine systemd[1]: Stopping LSB: Symantec AntiVirus Scanner...
Sep 14 12:56:02 crtqa-virtual-machine systemd[1]: Stopped LSB: Symantec AntiVirus Scanner.
Sep 14 12:56:02 crtqa-virtual-machine smcd[12872]: [25B blob data]
Sep 14 14:07:52 crtqa-virtual-machine systemd[1]: Stopped LSB: Symantec AntiVirus Scanner.

SEPFL:~# service symcfgd status
● symcfgd.service - LSB: Symantec AntiVirus Configuration Server
   Loaded: loaded (/etc/init.d/symcfgd; bad; vendor preset: enabled)
   Active: inactive (dead)
     Docs: man:systemd-sysv-generator(8)

Sep 14 12:56:01 crtqa-virtual-machine symcfgd[12392]: subscriber 3 has left -- closed 2 remaining handles
Sep 14 12:56:01 crtqa-virtual-machine symcfgd[12392]: subscriber 2 has left -- closed 0 remaining handles
Sep 14 12:56:03 crtqa-virtual-machine systemd[1]: Stopping LSB: Symantec AntiVirus Configuration Server...
Sep 14 12:56:15 crtqa-virtual-machine symcfgd[12392]: subscriber 1 has left -- closed 5 remaining handles
Sep 14 12:56:17 crtqa-virtual-machine symcfgd[13001]: [35B blob data]
Sep 14 12:56:17 crtqa-virtual-machine symcfgd[12392]: symcfgd shutdown -- was running  0:01
Sep 14 12:56:17 crtqa-virtual-machine symcfgd[12392]: --- symcfgd (pid 12392) has terminated ---
Sep 14 12:56:19 crtqa-virtual-machine symcfgd[13001]: [28B blob data]
Sep 14 12:56:19 crtqa-virtual-machine systemd[1]: Stopped LSB: Symantec AntiVirus Configuration Server.
Sep 14 14:07:51 crtqa-virtual-machine systemd[1]: Stopped LSB: Symantec AntiVirus Configuration Server.

Environment

Symantec Endpoint Protection for Linux (all versions prior to 14.0)

Cause

Every new kernel branch typically brings with it structural changes, which necessitates an update of our Auto-Protect kernel module source code.

Resolution

This issue has been fixed in Symantec Endpoint Protection for Linux 14.0.