Unable to install Endpoint protection 14.3 RU5 on Linux

Products

• Endpoint Protection

Issue/Introduction

Unable to install Symantec Endpoint Protection (SEP) 14.3 RU5 on OEL 8/RHEL 8 with an error Unknown symbol in module.

Environment

SEP Linux 14.3 RU1 and later

Cause

KMOD available on the client is in the support list, however post installation issues with loading of sisap and sisevt module observed.

Affected kernel versions  with KMOD : 10.0.4-1569

5.4.17-2136.312.3.4.el8uek   
5.4.17-2136.313.6.el8uek     
5.4.17-2136.314.6.2.el8uek   
5.4.17-2136.314.6.3.el8uek 

Resolution

Following error is found in the logs :  

1. sisap.log :

12/02/22 15:27:15: Loading sisap module. 
** running: insmod sisap.ko.xz  
insmod: ERROR: could not insert module /etc/symantec/sis/driver/5.4.17-2136.300.7.el8uek/sisap-x86_64-default.ko.xz: Unknown symbol in module

2. dmesg.txt : 

[   72.878414] sisap: loading out-of-tree module taints kernel.
[   72.878503] sisap: Unknown symbol sisevt_user_copyto (err -2)
[   72.878511] sisap: Unknown symbol sisevt_evrstimes (err -2)
[   72.878518] sisap: Unknown symbol sisevt_curr_gettgid (err -2)
[   72.878525] sisap: Unknown symbol sisevt_snprintf (err -2)
[   72.878540] sisap: Unknown symbol sisevt_timer_update (err -2)
[   72.878547] sisap: Unknown symbol sisevt_mutex_new (err -2)
[   72.878559] sisap: Unknown symbol sisevt_evget (err -2)
[   72.878569] sisap: Unknown symbol sisevt_version (err -2)
[   72.878581] sisap: Unknown symbol sisevt_mutex_delete (err -2)
[   72.878590] sisap: Unknown symbol sisevt_sleep (err -2)
[   72.878597] sisap: Unknown symbol sisevt_user_copyfrom (err -2)

3. Symantec released new KMOD version : 10.0.5.1642 addressing the issue identified on KMOD 10.0.4-1569

4. Update KMOD  Updating the kernel modules for the Symantec Linux Agent  or export the newer version of SEP client having the latest KMOD and install it on the client.