Loading...

Knowledge Center


Default rules are not applied after upgrading to Application Control and Change Control 6.1.4 (Ubuntu)
Technical Articles ID:   KB82820
Last Modified:  12/10/2015

Environment

McAfee Application Control (MAC) 6.1.4
McAfee Change Control (MCC) 6.1.4
 
Ubuntu platform

Problem

After you upgrade to MAC/MCC 6.1.4, new advanced exclusion filters (AEF)/updaters and attr rules are not added as default rules.

Workaround

ePO managed deployments:
 
Reapply the policies after the upgrade (immediately after the new version takes effect).
 
Non-ePO managed deployments:
  • If you upgraded from version 5.1.2 to 6.1.4, add the following rules using the Solidcore command line:
     
    • (Only if VirusScan Enterprise for Linux (VSEL) is installed) Attr rules - Application Control and Change Control
       
      sadmin attr add -p "/opt/NAI/LinuxShield/libexec/nailslogd"
       
      sadmin attr add -p "/opt/NAI/LinuxShield/libexec/nailsd"
       
      sadmin attr add -p "/opt/NAI/LinuxShield/libexec/logepo"
       
      sadmin attr add -p "/opt/NAI/LinuxShield/libexec/ods"
       
    • (Only if VirusScan Enterprise for Linux (VSEL) is installed) Updater rules - Application Control only
       
      sadmin updaters -t VSEL1 /opt/NAI/LinuxShield/libexec/scanner
       
    • (Only if McAfee Agent (MA) 5.x is installed) AEF rules -  Change Control only
       
      sadmin aef add file begins "/var/McAfee/agent/AgentEvents" and process ends "macompatsvc"
       
      sadmin aef add file begins "/var/McAfee/agent/AgentEvents" and process ends "scevtgen"
       
      admin aef add file equals "/etc/cma.d/lpc.conf" and process ends "macompatsvc"
     
  • If you upgraded from version 6.1.0 to 6.1.4, add the following rules using the Solidcore command line:
     
    • (Only if McAfee Agent (MA) 5.x is installed) AEF rules - Change Control only
       
      sadmin aef add file begins "/var/McAfee/agent/AgentEvents" and process ends "macompatsvc"
       
      sadmin aef add file begins "/var/McAfee/agent/AgentEvents" and process ends "scevtgen"
       
      admin aef add file equals "/etc/cma.d/lpc.conf" and process ends "macompatsvc"

Rate this document

Languages:

This article is available in the following languages:

English United States
Japanese

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.