Impact of Endpoint Protection and Protection Engine installed on Linux system
Article ID: 410943
Updated On:
Products
Issue/Introduction
Symantec Agent for Linux (SAL) or Symantec Endpoint Protection for Linux (SEP) and Symantec Protection Engine (SPE) both are installed on the same Linux Server.
There is some conflict between these two products due to common components and directories used:
1. While installing or uninstalling, directory permissions are changed for avdefs user group
2. Uninstalling of SEP or SPE will also uninstall CAF agent component which break each others functionalities.
Environment
SEP 14.3 RU1 and later
SPE 8.0x to 9.2x
Cause
Both products change the permission for shared directory (license and definitions directories) when installing/upgrading so whichever is installed later, makes the changes as per its own installer scripts which make the other malfunction at places.
Resolution
Engineering team has identified various scenarios where this conflict might occur and have added failsafe so that both can co-exist without any issue.
Below changes have been committed in both products.
SPE fresh install and Upgrade scenarios:--
1. If SEP Linux is present then do not uninstall CAF agent.
2. If SEP Linux is not present then uninstall CAF agent.
3. If SEP Linux is already present, then do not change the group for opt\Symantec to avdefs as this directory would already be existing and belonging to SEP Linux.
4. If SEP Linux is not present then create a new directory opt\Symantec and change the group for this to avdefs.
SPE Uninstall scenario:--
1. Delete the avdefs group when SPE is being uninstalled and SEP Linux is not present
2. Do not remove the avdefs group if SEP Linux is present during SPE uninstallation.
These improvements will be available in SEP 14.4 and SPE 9.3.0 releases.
Additional Information
Feedback
