Can "/opt/Symantec/sdcssagent/IPS" folder permissions be changed to 750

Products

• Endpoint Security Complete
• Endpoint Protection
• Data Center Security Server Advanced
• Data Center Security Server

Issue/Introduction

Symantec Endpoint Protection (SEP) and Data Center Security (DCS) agent for Linux directory "/opt/Symantec/sdcssagent/IPS" has default permissions: drwxr-x--x (751)

Can the folder permissions be changed to 750 without affecting product functionality?

Resolution

Both products utilize the /opt/Symantec/sdcssagent/IPS directory, and the sisipsagent service has strict dependencies on these folder permissions for proper functionality.

Modifying these default permissions (typically 751) to a more restrictive value like 750 will prevent critical agent services from starting and can block essential operations, such as trace logging, policy override functionality or may not be able to configure the agent with options related to sisipsconfig.sh