cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Level 8
Report Inappropriate Content
Message 1 of 2

Linux threat prevention disabled access-protection

Hi 

We have installed Endpoint Security Threat Prevention 10.6.10.107 on linux RHEL 8. We have notice that the threat prevention was set to disabled as per screenshot. We have tried to do a on-demand quick scan and found that is will stop scanning on the 15 minute and will report as fail. While access to the server found that the service is somehow not fully running. 

Stuff that was tried:

using the command ./isecav --setapstatus [enable] 

Restarting the service

Reinstall to a standalone package

McAfee Endpoint Security 

● mfetpd.service - McAfee Endpoint Security for Linux Threat Prevention
Loaded: loaded (/usr/lib/systemd/system/mfetpd.service; enabled; vendor preset: disabled)
Active: active (running) since Wed 2020-10-07 18:10:21 +08; 17min ago
Docs: man:mfetpd(8)
Process: 127482 ExecStartPre=/opt/McAfee/ens/tp/scripts/cgroup-mount-helper.sh systemd (code=exited, status=0/SUCCESS)
Process: 127393 ExecStartPre=/opt/McAfee/ens/tp/scripts/fileaccess-control-wrapper.sh systemd (code=exited, status=0/SUCCESS)
Process: 127340 ExecStartPre=/opt/McAfee/ens/tp/scripts/aac-control-wrapper.sh systemd (code=exited, status=0/SUCCESS)
Main PID: 127492 (mfetpd)
Tasks: 13 (limit: 50145)
Memory: 178.6M
CGroup: /system.slice/mfetpd.service
└─127492 /opt/McAfee/ens/tp/bin/mfetpd

Oct 07 18:10:21 msg-uat-aiplatform75gg fileaccess-control-wrapper.sh[127393]: which: no gcc in (/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin)
Oct 07 18:10:21 msg-uat-aiplatform75gg fileaccess-control-wrapper.sh[127393]: Attempting to compile FileAccess modules for the current kernel
Oct 07 18:10:21 msg-uat-aiplatform75gg fileaccess-control-wrapper.sh[127393]: /opt/McAfee/ens/esp/modules/fileaccess/scripts/fileaccess-build.sh: line 223: -v: command not found
Oct 07 18:10:21 msg-uat-aiplatform75gg fileaccess-control-wrapper.sh[127393]: Make utility not found
Oct 07 18:10:21 msg-uat-aiplatform75gg fileaccess-control-wrapper.sh[127393]: Compilation of ENSL fileAccess modules failed the environment check
Oct 07 18:10:21 msg-uat-aiplatform75gg fileaccess-control-wrapper.sh[127393]: Fail: Module reusability and RKMS for fileaccess kernel module
Oct 07 18:10:21 msg-uat-aiplatform75gg fileaccess-control-wrapper.sh[127393]: On-Access Scan will not work
Oct 07 18:10:21 msg-uat-aiplatform75gg systemd[1]: Started McAfee Endpoint Security for Linux Threat Prevention.
Oct 07 18:10:32 msg-uat-aiplatform75gg mfetpd[127492]: CEF:0|McAfee LLC|McAfee Endpoint Security for Linux Threat Prevention|10.6.10.107|3|FileAccessEventKernel|7|deviceProcessName=/opt/McAfee/ens/tp/bin/mfetpd>
Oct 07 18:12:42 msg-uat-aiplatform75gg mfetpd[127492]: CEF:0|McAfee LLC|McAfee Endpoint Security for Linux Threat Prevention|10.6.10.107|3|FileAccessEventKernel|7|deviceProcessName=/opt/McAfee/ens/tp/bin/mfetpd>

1 Reply
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: Linux threat prevention disabled access-protection

Hi,

Oct 07 18:10:21 msg-uat-aiplatform75gg fileaccess-control-wrapper.sh[127393]: which: no gcc in (/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin)
Oct 07 18:10:21 msg-uat-aiplatform75gg fileaccess-control-wrapper.sh[127393]: Attempting to compile FileAccess modules for the current kernel
Oct 07 18:10:21 msg-uat-aiplatform75gg fileaccess-control-wrapper.sh[127393]: /opt/McAfee/ens/esp/modules/fileaccess/scripts/fileaccess-build.sh: line 223: -v: command not found
Oct 07 18:10:21 msg-uat-aiplatform75gg fileaccess-control-wrapper.sh[127393]: Make utility not found

Error: gcc not found
Error: Make utility not found
 
looks like they are missing the 'build-essentials' package
 
to install the package:
#sudo apt install build-essential
have the customer install those packages and restart mfetpd. then verify if AP starts.
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community