Endpoint Protection

 View Only
  • 1.  Symantec Autoprotect on OEL 3.8.x UEK Kernels

    Posted Oct 24, 2014 03:00 PM

    Hello,

    We are using the new version SEP 12.1.5 for Linux and Oracle Enterprise Linux 6.6 with the latest UEK kernel for this distro (3.8.13-44.1.3.el6uek.x86_64) We would like to get autoprotect working on this kernel. It is unsupported, therefore we used the build.sh and attempt to compile it manually, which succeeds!

    The build.sh in ap-kernelmodule-12.1.5337-5000 actually restarts rtvscand and autoprotect after the successful build, but the module fails to load.

    Here is the error:

    Starting AP: insmod: error inserting '/opt/Symantec/autoprotect/symev-custom-3.8.13-44.1.3.el6uek-x86_64.ko': -1 Module has wrong symbol version
    symev: unable to load kernel support module (UNSUPPORTED-OS-or-uek-6-3.8.13-44.1.3.el6uek-x86_64)
    kernel drivers are not loaded.

    And here is the entry in /var/log/messages:

    Oct 24 14:50:40 localhost kernel: symev: can't get the address of do_path_lookup function.
    Oct 24 14:50:40 localhost symev: unable to load kernel support module (UNSUPPORTED-OS-or-uek-6-3.8.13-44.1.3.el6uek-x86_64)

    Here is an interesting article that a search turned up for this error. It appears that the path_lookup function has been replaced in the new 3.x.x kernel versions.

    http://comments.gmane.org/gmane.linux.kernel.kernelnewbies/42203

    Please reply if there is a new version of the ap-kernelmodule which has fixed this.

    Thank You!

     



  • 2.  RE: Symantec Autoprotect on OEL 3.8.x UEK Kernels

    Posted Oct 25, 2014 05:05 AM

    Check the latest SEP support for linux, 3.8.13-44.1.3.el6uek.x86_64 is not be supported.

    Supported Linux kernels for Symantec Endpoint Protection

    Article:TECH223240  |  Created: 2014-07-24  |  Updated: 2014-09-19  |  Article URL http://www.symantec.com/docs/TECH223240