SEP/DCS kernel modules not loading despite being supported and latest definitions applied

Products

• Endpoint Security Complete
• Data Center Security Server
• Endpoint Protection

Issue/Introduction

SEP kernel modules are not loading despite being supported and latest definitions applied.

Environment

Linux (all distributions) + SEP/DCS

Cause

Run the following command on the impacted system in order to check kernel restrictions:

sysctl kernel.kptr_restrict

If the output is the following, kernel access is restricted and restrictions needs to be modified/removed:

kernel.kptr_restrict = 2

Resolution

If "kernel.kptr_restrict" value is "2", it needs to be changed to "1" or "0", in order for the modules to be loaded.

Please refer to your OS vendor, for instructions on how to modify the "kernel.kptr_restrict" value.