When the McAfee agent is installed in Linux, it creates user mfe and group mfe. https://kc.mcafee.com/corporate/index?page=content&id=KB89431&locale=en_US, this articles seems to note that it runs as least privileges but I have seen on Linux logs that it is running as root. I have also seen odd directories created with 0 permissions. For example, I came across several shadow directories created with 0 permissions. I am not sure if mfe user is the one that created them but it was not allowing the extra directories to be removed. Only when I disabled TP for Linux was I allowed to remove the extras. Any help on this would be appreciated.
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.