EDR: python-cb-yara-connector RPM missing in CentOS 6 servers

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• python-cb-yara-connector RPM is missing in CentOS 6 servers

yum list --disablerepo=* --enablerepo=CbOpenSource | grep yara

python-cb-yara-manager.x86_64 2.1.3-1.el6 @CbOpenSource

 

Environment

• EDR: All supported versions
• CentOS : 6.x

Cause

The repository with the yara connector is changed in CentOS 6 to CbOpenSource2

Resolution

• The above command can be modified as follows:

yum list --disablerepo=* --enablerepo=CbOpenSource | grep yara 
to
yum list --disablerepo=*--enablerepo=CbOpenSource* | grep yara

• The yara connector can be installed using :

yum install python-cb-yara-connector --disablerepo=* --enablerepo=CbOpenSource2

 

Additional Information

CentOS 7 versus CentOS 6: