Liveupdate failing to process definitions of the Linux Server after download

Products

• Endpoint Security Complete
• Endpoint Protection

Issue/Introduction

Schedule Live Update on Symantec Endpoint Protection (SEP) Client on Linux is failing, even the Intelligent updater is failing to process and update the definitions on the agent 

Environment

SEP for Linux 14.3 RU5, 14.3 RU1, and above.

Cause

In the GetAgetinfo (GIA) logs when checking "all_agetn_file" log file found that group "avdefs" or "root" permissions missing in the system with the issue

/opt/Symantec/sdcssagent/AMD/sef:
total 13780
-rwx------ 1 root root   94208 Jun 20 15:23 luxds.dat
drwxr-x--- 2 root root    4096 Jun 20 15:23 LiveUpdateDownloads
drwxr-x--- 5 root root    4096 Jun 20 15:21 appdata
drwxr-x--- 2 root root    4096 Jun 20 15:18 Logs
drwx------ 2 root root    4096 Jun 20 15:16 config
drwx------ 2 root root    4096 Jun 12 00:00 symplatform
-rw------- 1 root 1001  219408 Jun  8 08:59 libSymDltCl.so
-rw------- 1 root 1001  421768 Jun  8 08:59 libluxcustomerlogger.so
-rw------- 1 root 1001 6204296 Jun  8 08:59 liblux.so
-rw------- 1 root 1001  173424 Jun  8 08:59 libpatchapp.so
-rw------- 1 root 1001 2850464 Jun  8 08:59 libduluxcallback.so
drwx------ 4 root root    4096 Jun  8 08:32 definitions
-rwx------ 1 root root  551488 Nov 15  2022 libcx_lib.so
-rwx------ 1 root root 3534056 Nov 15  2022 libspifc.so
-rwx------ 1 root root   28672 Nov 15  2022 symplatformreg.dat

 

Compare to the system without issue we see this  

/opt/Symantec/sdcssagent/AMD/sef:
total 13780
-rwx------. 1 root root     94208 Jun 20 15:01 luxds.dat
drwxr-x---. 2 root root      4096 Jun 20 15:01 LiveUpdateDownloads
drwx------. 2 root root      4096 Jun 20 00:01 symplatform
drwxr-x---. 5 root root      4096 Jun 16 15:46 appdata
-rw-------. 1 root avdefs  219408 Jun 16 15:46 libSymDltCl.so
-rw-------. 1 root avdefs  421768 Jun 16 15:46 libluxcustomerlogger.so
-rw-------. 1 root avdefs  173424 Jun 16 15:46 libpatchapp.so
-rw-------. 1 root avdefs 6204296 Jun 16 15:46 liblux.so
-rw-------. 1 root avdefs 2850464 Jun 16 15:46 libduluxcallback.so
drwxr-x---. 2 root root      4096 Jun 16 15:30 Logs
drwx------. 4 root root      4096 Jun 16 15:30 definitions
drwx------. 2 root root      4096 Jun 16 15:30 config
-rwx------. 1 root root    551488 Nov 15  2022 libcx_lib.so
-rwx------. 1 root root   3534056 Nov 15  2022 libspifc.so
-rwx------. 1 root root     28672 Nov 15  2022 symplatformreg.dat

Resolution

- Check the file /etc/group and verify if the "avdef" group exist 
# cat /etc/group | grep avdef

If not present create the group "avdefs" with user "root" in it, and check
# sudo groupadd avdefs
# sudo usermod -a -G avdefs root

- Browse to the folder and check the permission for "avdefs" group
/opt/Symantec/sdcssagent/AMD/sef
/opt/Symantec/sdcssagent/AMD/sef/definitions
/opt/Symantec/sdcssagent/AMD/sef/definitions/symcdata
/opt/Symantec/sdcssagent/AMD/sef/definitions/symcdata/symplatformdefs

Run command on each of the folders and files 
# chgrp avdefs <path>

e.g. #chgrp avdefs /opt/Symantec/sdcssagent/AMD/sef

This will update the Group permission

Restart the SEP agent services and run Liveupdate