Rebuilding the Linux agent cache results in a new host_id value being generated

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

When deleting and rebuilding the Linux agent cache, instead of keeping the existing host_id information, a new host_id value is generated and reported to the App Control console. This creates multiple entries for the same endpoint.

Environment

• App Control Server: All Supported Versions
• App Control Linux Agent: 8.7.16 and lower
• Linux OS: All Supported Verisons

Cause

As the cache db is deleted and the b9daemon starts, it tries to fetch the clientid from the cache db and fails, thus a new clientid is generated.The new clientid is send to the AppC server, when the b9daemon initiates a connection with the server. Now the server gets a new clientid from the endpoint and generates a new hostid corresponding to the new clientid.

Resolution

This defect (EP-16690) was resolved in Linux agent version 8.7.17 through 8.7.21. It will not be included in the 8.8.x branch of the agent, but will be re-added as part of the 8.9.x agent branch.