CB Response: Services are not starting with error after upgrading to 6.2.4

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• After upgrading to Response 6.2.4, the services will not start. The following error is seen when starting the services on the Response Server: 

  Node[0 ] ImportError: /usr/share/cb/virtualenv/lib/python2.7/site-packages/selinux/_selinux.so: undefined symbol: selinuxfs_exists
  Node[0 ] Exec failure (1)

Environment

• CB Response Server or Cluster: 6.2.4 and higher
• CentOS 6.6 and lower
• RHEL 6.6 and lower

Cause

• This has been seen in OS environments below the minimum requirements for CB Response 6.2.4 and higher..
• Example: Seen on RHEL 6.5 OS after upgrading Response to 6.2.4

Resolution

• CB Response 6.2.4 and higher requires the OS to be at minimum:
  1. Linux Red Hat Enterprise Linux (RHEL) 6.7 - 6.10 (64-bit)
  2. Red Hat Enterprise Linux (RHEL) 7.3 - 7.5 (64-bit)
  3. CentOS 6.7-6.10 (64-bit)
  4. CentOS 7.3-7.5 (64-bit)