Endpoint Protection Manager shows log on user as root irrespective of logged in user on the endpoint

Products

• Endpoint Protection

Issue/Introduction

• Symantec Endpoint Protection for Linux (SEPFL) 14.3 MP1 or older client is managed by Symantec Endpoint Protection Manager (SEPM) 14.x
• Logon User is shown as root irrespective of the logged in user on the endpoint client.

• As an example, user1 is the only logged on user on endpoint however SEPM still shows root as Logon User.

Environment

• SEPM 14.3x
• SEPFL 14.3 MP1 or older

Cause

• /opt/Symantec/symantec_antivirus/ folder have root:root ownership and internally while importing the sylink we are trying to user required libs from this folder. 

Resolution

This behavior is expected and the product is working as per design.