SEP service in not running state and shows "service is not a native service, redirecting to /sbin/chkconfig."
search cancel

SEP service in not running state and shows "service is not a native service, redirecting to /sbin/chkconfig."

book

Article ID: 280389

calendar_today

Updated On:

Products

Endpoint Security Complete Symantec Advanced Endpoint Defense (with SEP)

Issue/Introduction

If the Linux administrator will happen to stop SEP services using any of below commands:

[root@Linux-rehl7-1 ~]# systemctl disable sisidsdaemon
Removed symlink /etc/systemd/system/default.target.wants/sisidsdaemon.service.
Removed symlink /etc/systemd/system/sisidsagent.service.
[root@Linux-rehl7-1 ~]# systemctl disable sisipsdaemon
Removed symlink /etc/systemd/system/default.target.wants/sisipsdaemon.service.
Removed symlink /etc/systemd/system/sisipsagent.service.
[root@Linux-rehl7-1 ~]# systemctl disable sisamddaemon
Removed symlink /etc/systemd/system/default.target.wants/sisamddaemon.service.
Removed symlink /etc/systemd/system/sisamdagent.service.
[root@Linux-rehl7-1 ~]# systemctl disable cafdaemon
Removed symlink /etc/systemd/system/default.target.wants/cafdaemon.service.
Removed symlink /etc/systemd/system/cafagent.service.

This will result in removing the symbolic links for each of these services, rendering all services in "Not running" state and displaying below errors:

[root@Linux-rehl7-1 ~]# /usr/lib/symantec/scripts/status.sh

Symantec Agent for Linux
Symantec Endpoint Protection (SEPM) 14.3.8138.8000

Daemon status:
cafagent.service is not a native service, redirecting to /sbin/chkconfig.
Executing /sbin/chkconfig cafagent --level=5
  cafagent             not running
sisamdagent.service is not a native service, redirecting to /sbin/chkconfig.
Executing /sbin/chkconfig sisamdagent --level=5
  sisamdagent          not running
sisidsagent.service is not a native service, redirecting to /sbin/chkconfig.
Executing /sbin/chkconfig sisidsagent --level=5
  sisidsagent          not running
sisipsagent.service is not a native service, redirecting to /sbin/chkconfig.
Executing /sbin/chkconfig sisipsagent --level=5
  sisipsagent          not running

Module status:
  sisevt               loaded
  sisap                loaded 

Environment

RHEL7, RHEL8 and SEP for Linux client 14.3 RU6, 14.3 RU8

Resolution

Run below commands to restore the removed symbolic links:

[root@Linux-rehl7-1 ~]# systemctl enable sisidsdaemon
Created symlink from /etc/systemd/system/sisidsagent.service to /etc/systemd/system/sisidsdaemon.service.
Created symlink from /etc/systemd/system/default.target.wants/sisidsdaemon.service to /etc/systemd/system/sisidsdaemon.service.
[root@Linux-rehl7-1 ~]# systemctl enable sisipsdaemon
Created symlink from /etc/systemd/system/sisipsagent.service to /etc/systemd/system/sisipsdaemon.service.
Created symlink from /etc/systemd/system/default.target.wants/sisipsdaemon.service to /etc/systemd/system/sisipsdaemon.service.
[root@Linux-rehl7-1 ~]# systemctl enable sisamddaemon
Created symlink from /etc/systemd/system/sisamdagent.service to /etc/systemd/system/sisamddaemon.service.
Created symlink from /etc/systemd/system/default.target.wants/sisamddaemon.service to /etc/systemd/system/sisamddaemon.service.
[root@Linux-rehl7-1 ~]# systemctl enable cafdaemon
Created symlink from /etc/systemd/system/cafagent.service to /etc/systemd/system/cafdaemon.service.
Created symlink from /etc/systemd/system/default.target.wants/cafdaemon.service to /etc/systemd/system/cafdaemon.service.

Additional Information

CRE-15733