The VSEL Repository List flashes and cannot be modified

Technical Articles ID: KB67360
Last Modified: 7/28/2021

Environment

McAfee VirusScan Enterprise for Linux

Problem

When attempting to configure the McAfee VirusScan Enterprise (VSEL) Repository list, the pane flashes, but changes cannot be made.

Problem

The Repository List in McAfee VSEL cannot be modified on some servers operating Security Enhanced Linux (SELinux).

Problem

Various errors are recorded in /var/log/messages.

The Audit log output may also include errors similar to the following:

type=USER_AUTH msg=audit(1252416219.039:49): user pid=4925 uid=0 auid=0 subj=root:system_r:rpm_script_t:s0-s0:c0.c1023 msg='PAM: authentication acct="nails" : exe="/opt/NAI/LinuxShield/libexec/nailslogd" (hostname=?, addr=?, terminal=? res=success)'
type=AVC msg=audit(1252416231.831:50): avc: denied { execmod } for pid=4957 comm="nails-getsiteli" path="/opt/McAfee/cma/bin/libppupdaterstub.so.4.0" dev=dm-0 ino=786511 scontext=root:system_r:rpm_script_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=file
type=SYSCALL msg=audit(1252416231.831:50): arch=40000003 syscall=125 success=no exit=-13 a0=3d7000 a1=67000 a2=5 a3=b7f30590 items=0 ppid=4925 pid=4957 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="nails-getsiteli" exe="/opt/NAI/LinuxShield/libexec/nails-getsitelist"

Cause

McAfee Agent communication is blocked in the SELinux environment. VSEL collects information from the McAfee Agent process to provide the repository details. SELinux can block the cma and logepo processes making it impossible for VSEL to obtain the necessary sitelist information.

Solution

Modify SELinux rules to allow the necessary processes.

The following steps are provided as an example for allowing the McAfee Agent processes on Red Hat Enterprise Linux v5:

Open a command-line session.
Type each of the following commands and press ENTER after each line:

#chcon -t textrel_shlib_t /opt/McAfee/cma/bin/libppupdaterstub.so.4.0
#chcon -t textrel_shlib_t /opt/McAfee/cma/bin/libeventinterface.so.4.0

NOTE: These commands are used as examples only. McAfee Enterprise cannot be held responsible for configuring your SELinux rules. The changes apply to the default targeted Policy and only to the lib files related to the cma process.

Related Information

For more information concerning SELinux, go to: http://selinuxproject.org.

Affected Products

Known Issue/Product Defect
VirusScan Enterprise for Linux 2.0.x
VirusScan Enterprise for Linux 1.9.x

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Knowledge Center

The VSEL Repository List flashes and cannot be modified

Environment

Problem

Problem

Problem

Cause

Solution

Related Information

Affected Products

Glossary of Technical Terms

Title

Title

Knowledge Center

The VSEL Repository List flashes and cannot be modified

Environment

Problem

Problem

Problem

Cause

Solution

Related Information

Affected Products

Glossary of Technical Terms

Choose your region

Title

Title