CB Protection: Linux Agent Shows Disconnected Due to Interaction with Prelink Utility

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

The Linux Agent becomes disconnected from the CB Protection Server when the Prelink Utility is enabled.

Environment

• Cb Protection Agent: All Supported Versions
• Linux: All Supported Versions

Cause

The Agent daemon has an interaction with the Prelink utility. This utility modifies the load order of libraries within an executable, which causes the hash to change. This then eventually caused the Agent daemon to deadlocked and causes the Agent to become disconnected from the Server.

Resolution

• Disable the Prelink utility by going to /etc/sysconfig/prelink. Change the PRELINKING=yes to PRELINKING=no.
• Another way is to go to /etc/cron.daily on the terminal and run "chmod –x prelink".