Schedule Live Update on Symantec Endpoint Protection (SEP) Client on Linux is failing, even the Intelligent updater is failing to process and update the definitions on the agent
SEP for Linux 14.3 RU5, 14.3 RU1, and above.
In the GetAgetinfo (GIA) logs when checking "all_agetn_file" log file found that group "avdefs" or "root" permissions missing in the system with the issue
/opt/Symantec/sdcssagent/AMD/sef:
total 13780
-rwx------ 1 root root 94208 Jun 20 15:23 luxds.dat
drwxr-x--- 2 root root 4096 Jun 20 15:23 LiveUpdateDownloads
drwxr-x--- 5 root root 4096 Jun 20 15:21 appdata
drwxr-x--- 2 root root 4096 Jun 20 15:18 Logs
drwx------ 2 root root 4096 Jun 20 15:16 config
drwx------ 2 root root 4096 Jun 12 00:00 symplatform
-rw------- 1 root 1001 219408 Jun 8 08:59 libSymDltCl.so
-rw------- 1 root 1001 421768 Jun 8 08:59 libluxcustomerlogger.so
-rw------- 1 root 1001 6204296 Jun 8 08:59 liblux.so
-rw------- 1 root 1001 173424 Jun 8 08:59 libpatchapp.so
-rw------- 1 root 1001 2850464 Jun 8 08:59 libduluxcallback.so
drwx------ 4 root root 4096 Jun 8 08:32 definitions
-rwx------ 1 root root 551488 Nov 15 2022 libcx_lib.so
-rwx------ 1 root root 3534056 Nov 15 2022 libspifc.so
-rwx------ 1 root root 28672 Nov 15 2022 symplatformreg.dat
Compare to the system without issue we see this
/opt/Symantec/sdcssagent/AMD/sef:
total 13780
-rwx------. 1 root root 94208 Jun 20 15:01 luxds.dat
drwxr-x---. 2 root root 4096 Jun 20 15:01 LiveUpdateDownloads
drwx------. 2 root root 4096 Jun 20 00:01 symplatform
drwxr-x---. 5 root root 4096 Jun 16 15:46 appdata
-rw-------. 1 root avdefs 219408 Jun 16 15:46 libSymDltCl.so
-rw-------. 1 root avdefs 421768 Jun 16 15:46 libluxcustomerlogger.so
-rw-------. 1 root avdefs 173424 Jun 16 15:46 libpatchapp.so
-rw-------. 1 root avdefs 6204296 Jun 16 15:46 liblux.so
-rw-------. 1 root avdefs 2850464 Jun 16 15:46 libduluxcallback.so
drwxr-x---. 2 root root 4096 Jun 16 15:30 Logs
drwx------. 4 root root 4096 Jun 16 15:30 definitions
drwx------. 2 root root 4096 Jun 16 15:30 config
-rwx------. 1 root root 551488 Nov 15 2022 libcx_lib.so
-rwx------. 1 root root 3534056 Nov 15 2022 libspifc.so
-rwx------. 1 root root 28672 Nov 15 2022 symplatformreg.dat
- Check the file /etc/group and verify if the "avdef" group exist
# cat /etc/group | grep avdef
If not present create the group "avdefs" with user "root" in it, and check
# sudo groupadd avdefs
# sudo usermod -a -G avdefs root
- Browse to the folder and check the permission for "avdefs" group
/opt/Symantec/sdcssagent/AMD/sef
/opt/Symantec/sdcssagent/AMD/sef/definitions
/opt/Symantec/sdcssagent/AMD/sef/definitions/symcdata
/opt/Symantec/sdcssagent/AMD/sef/definitions/symcdata/symplatformdefs
Run command on each of the folders and files
# chgrp avdefs <path>
e.g. #chgrp avdefs /opt/Symantec/sdcssagent/AMD/sef
This will update the Group permission
Restart the SEP agent services and run Liveupdate