What are common installation steps for Symantec Endpoint Protection for Linux

book

Article ID: 161866

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

It is necessary to go through specific steps for the installation of the Symantec Endpoint Protection for Linux (SEPFL) agent.

Resolution

Supported Linux Kernels

Supported Linux kernels for Symantec Endpoint Protection for Linux (SEPFL) are listed below:

Note: A minor variance in the kernel versions listed are still considered supported, however the SEP AutoProtect module may need recompiling. As in the possible SEP installer message, "The current kernel is not supported, if you want to make AutoProtect work properly, please switch to the folder 'src' under your install image, decompress the source code file and run build.sh to compile and install the drivers for AutoProtect." Recompiling the AutoProtect modules requires kernel-devel and other software development tools.

 

Linux Development Tools

Linux development tools may be necessary, if the SEPFL installer needs to recompile the AutoProtect module for your kernel version. Development tools are available from Linux installer discs or repositories. The tools package name varies, depending on the Linux release and version: e.g. kernel-devel, linux-headers, kernel-source, linux-source... See How to Manually compile Auto-Protect kernel modules for Endpoint Protection for Linux for more information.

 

Java

Oracle Java is not required by SEP 14 or newer.

In version 12.1 of SEP for Linux, Oracle Java (TM) 1.5 or later is required by LiveUpdate; Java 7 or 8 is required. Java 9 is not currently supported. The Java version command:

   ("[path_to_java]/bin/java -v") should identify as "Java HotSpot (TM)"

Note: OpenJDK, IcedTea, etc are not supported by SEP.

Java Cryptography Extension (JCE)

The matching Unlimited Java Cryptography Extension (JCE) files are also required by SEPFL; JCE files and installation instructions are downloadable at http://www.oracle.com/technetwork/java/javase/downloads/index.html#other.

The Java folder used by SEPFL must be owned by superuser. To set superuser ownership:

    sudo chown -R root:root /usr/local/lib/jre-1.7.0_75/ # for example

32-Bit Linux Libraries

For both 32-bit and 64-bit Linux systems 32-bit libraries are required. These packages are required for SEPFL to function.

On CentOS or RHEL systems (yum), run the following commands:

    sudo yum install glibc.i686 libgcc.i686 libX11.i686

On Debian or Ubuntu based systems (apt-get), run the following commands:

    sudo dpkg --add-architecture i386

    sudo apt-get install libc6:i386 libx11-6:i386 libncurses5:i386 libstdc++6:i386

    sudo apt-get install lib32ncurses5 lib32z1

 

Disk Space

 

Symantec documented disk space requirements can lag behind the state of the product and the maximum size of a definition update download. Please ensure that sufficient disk space is available in /opt/ and /tmp/. According to most recent testing with SEP 12.1 RU6, total pre-installation space requirements are about 9GB for /opt/ and 1.5GB for /tmp/. The /tmp/ requirement and about 4GB of /opt/ are needed for working space when updating definitions.

 

Other

The SEP client Graphical User Interface (GUI) is optional, but it requires either KDE or Gnome graphical desktop environments in order to be installed for viewing. Also ncompress and sharutils packages are required by the Intelligent Updater, which can be obtained by the following Terminal command:

   sudo yum install ncompress sharutils