How to Compile and Install Auto-Protect Kernel Modules for use in your local SUSE Linux environment

Article:TECH97037  |  Created: 2009-01-27  |  Updated: 2013-03-14  |  Article URL http://www.symantec.com/docs/TECH97037
Article Type
Technical Solution


Environment

Problem



How do you enable Auto-Protect in a SUSE Linux environment if the Auto-Protect status is "Disabled" after the initial install of the Symantec AntiVirus for Linux (SAV for Linux) software?

 


Error



Symptoms

SAVFL's Auto-Protect fails to enable on Linux machines.

Cause



Varying version of the Linux kernel.

 


Solution



Note: There are hundreds of Linux distributions and versions around the world. It is not possible for Symantec to officially support all of them. If you do not see Auto-Protect kernel modules for your Linux distribution and versions in the latest release, you can try to compile your own kernel modules by using the source code and library files that Symantec provides. The following instructions were written for SUSE Linux and a different process may be needed for other distributions.
All installation files on the CD must be copied to a directory of your making on your system

Additional compiling instructions for various Linux distributions are available in the README file available on the downloaded CD after expanding the compressed file p-kernelmodule-1.0.8-17.tar.gz located on the CD.

How to compile your own Auto-Protect module

1) You must install the kernel-source and gcc files using Yast- Select Software Management


    Type “kernel-source” in the Search window and select the “Search” button

    “Check” the package and Select “Accept” to install it.



    Type “gcc” in the search window and check as indicated in the picture below.

    Select the “Accept” button to install the packages.


2) Change to the directory you copied the CD to and unpack the Auto-Protect source tarball file using the command listed below. The ap-kernelmodule-1.0.8-17 directory will be created automatically.


    cd /[your path to your local SAVFL 1.0.8-17 cd files]/ (files from the CD)



    tar –xf ap-kernelmodule-1.0.8-17.tar.gz (expand the compressed file- creates own directory)



    cd ap-kernelmodule-1.0.8-17/ (change to new directory)


Compile the new modules


    ./build.sh --kernel-dir /lib/modules/$(uname -r)/build (command to compile new modules)

    (the two “ko” files are what were created)



    Note that you must not rename kernel module files, because the Auto-Protect service script, /etc/init.d/autoprotect, has file name matching rules that are needed to load the appropriate kernel module files.


3) Install the kernel modules


    Copy the two kernel module files to the /opt/Symantec/autoprotect directory.

    cp bin.ira/*.ko /opt/Symantec/autoprotect/


4) Restart the Auto-Protect and the rtvscand services


    (Rebooting your computer will restart these services as well)

    /etc/init.d/autoprotect restart

    /etc/init.d/rtvscand restart


If the Auto-Protect service restarts successfully, check to see if the kernel modules are loaded by using the following command:


    lsmod | grep sym


Verify that Auto-Protect is enabled using the following commands:


    sav info –a (status of autoprotect)
    sav autoprotect –e (enables autoprotect)

 




Legacy ID



2009102707292048


Article URL http://www.symantec.com/docs/TECH97037


Terms of use for this information are found in Legal Notices