CPU accounting is enabled after installing SEP Linux agent

Products

• Endpoint Protection

Issue/Introduction

CPU accounting is enabled after installing SEP Linux agent. As a result, some application services that require real-time scheduling may not start.

Environment

• SEP Linux agent 14.3 RU1 and later.
• RedHat Enterprise Linux 7.x

Cause

Enabling CPU accounting is a default behavior of SEP installation.

Resolution

To disable CPU accouting after install SEP Linux agent:

1. Run following command by root.
   

   sed -i 's|Slice=sdcss-amd.slice|#Slice=sdcss-amd.slice|g' /etc/systemd/system/sisamddaemon.service
   systemctl daemon-reload

2. Reboot OS.

Additional Information

Processes requiring Real-Time Scheduling fail with "sched_setscheduler: Operation not permitted" error or similar