RHLE 8.4 fapolicyd blocks ENS installations

[JT]

Hello,

I'm running into the problem that the file access policy (fapolicyd) in a RHLE 8.4 is blocking ENS installation in the server. 

 Are there any documentation about McAfee and the file access policy daemon (fapolicyd), like specific ruleset for McAfee to be whitelisted in the fapolicyd?

Thanks in advance.

[Aravind-K · Accepted solution]

Hello JT,

Thank you for reaching us through community.

Am sorry we do not have any documentation what you're looking for. I would request your Linux admin to allow the ENSLTP installation file in fapolicyd, so that it doesn't gets blocked during the execution.

Reference: 
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/ass...

Hope this help.

Thanks,
Aravind K

[JT]

Thanks for the quick reply. 

Fapolicy is a new feature RHEL8 and I was hoping the McAfee would offer known ruleset to use for the Fapolicy to save time. Otherwise we'll have to go to the long route, go over the logs and unblock what we see and start over until all unblocked. 

Thanks again.

[gururaj]

Hi JT,

 what is error you are getting during the installation of the ENSL product. check the installation log for the specific error.

Regards,

Gururaj.m.d  

[JT]

Thanks for the reply. We whitelisted the processes that were getting block.