CB Response: Upgrade failing with error: No such file or directory: '/sbin/iptables'

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Upgrade errors out with message

No such file or directory: '/sbin/iptables'

• No iptables exists in /sbin

Environment

• CB Response Server: 6.x

Cause

The iptables symlink has been deleted from /sbin

Resolution

1. move /var/lib/alternatives/iptables.x86_64 out of /var/lib/alternatives directory, e.g.:

sudo mv -i /var/lib/alternatives/iptables.x86_64 /var/tmp/

2. ​​​​Reinstall the iptables packages:

sudo yum reinstall iptables iptables-ipv6

3. Finish upgrade of Response

sudo /usr/share/cb/cbupgrade

Additional Information

• /sbin/iptables is a symbolic link to /var/lib/alternatives/iptables.x86_64
• Even if Response is not configured to manage iptables, the upgrade process will touch that file location. If the file is missing the upgrade errors out