Linux Sensor Installs in Bypass

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Installing the sensor on Linux goes immediately into bypass

Environment

• Carbon Black Cloud Linux Sensor: 2.10+ and Higher
• Linux Kernel: 4.4+ 

Cause

• This can happen if the required kernel headers are not installed for Linux 4.4+ Kernels
• The COMPANY_CODE wasn't used during install
• The Sensor doesn't support the kernel of the OS it's being installed on

Resolution

• Please refer to the Sensor Installation Guide Section "Prerequisites for Linux 4.4+ Kernels for Linux sensor versions 2.10+" here
• Confirm that the COMPANY_CODE was used during install
• Confirm that the sensor supports the kernel that the OS is using via this chart

Additional Information

Confirm that the COMPANY_CODE was used during install