Cafagent fails to start with the following error as part of the logged events: Main process exited, code=exited, status=70/SOFTWARE

Products

• Endpoint Security Complete

Issue/Introduction

The Symantec Endpoint Protection agent for Linux fails to start all services and logs the following error:

Jul 20 11:28:42 lapprib00001d11 systemd[1]: cafdaemon.service: Main process exited, code=exited, status=70/SOFTWARE
Jul 20 11:28:42 lapprib00001d11 systemd[1]: cafdaemon.service: Failed with result 'exit-code'.
Jul 20 11:28:42 lapprib00001d11 systemd[1]: cafdaemon.service: Service RestartSec=100ms expired, scheduling restart.
Jul 20 11:28:42 lapprib00001d11 systemd[1]: cafdaemon.service: Scheduled restart job, restart counter is at 5.
Jul 20 11:28:42 lapprib00001d11 systemd[1]: Stopped Symantec Agent for Linux CAF daemon.
Jul 20 11:28:42 lapprib00001d11 systemd[1]: cafdaemon.service: Start request repeated too quickly.
Jul 20 11:28:42 lapprib00001d11 systemd[1]: cafdaemon.service: Failed with result 'exit-code'.
Jul 20 11:28:42 lapprib00001d11 systemd[1]: Failed to start Symantec Agent for Linux CAF daemon.

The directory /var/symantec/sep is missing files and logs.

Cause

Permissions for /var/log may be incorrect.

Resolution

Check the permissions for /var/log. The standard permissions are 755.