Emerging Issue with McAfee Application and Change Control 6.x and McAfee Agent 5.7 for Linux

[mbuehler]

KB Article KB93974 has been published with details on an emerging issue with Solidcore and McAfee Agent 5.7 for linux. Please review the KB for details, and subscribe to the article to receive a notification when it receives an update.

 

Environment

McAfee Application and Change Control for Linux (MACC) 6.x
McAfee Agent (MA) 5.7.x for Linux

Problem

After you install or upgrade to MA 5.7 for Linux, you see an excessive number of Integrity Control events. You see this issue on systems running MACC for Linux.

The events are triggered by the /opt/McAfee/agent/bin/masvc process for the /etc/ma.d/EPOAGENT3000/config.xml file.

Solution

Technical Support is investigating this issue. As a temporary measure, implement the following workaround.

NOTE: An updated MACC extension that includes a default filter rule for this event is planned for a future release.

[yaz]

@mbuehler : Thanks for posting details on the emerging issue.