It is strongly recommended to use the appropriate hotfix for your version of VSEL listed in the Solution, but if you cannot apply the appropriate hotfix immediately, apply the following workaround.
For systems managed by ePO:
Remove any Windows path type exclusions in the On-Access Scanning Policy:
- Remove any Windows type exclusions:
- Open the ePO Console.
- Access the Policy Catalog.
- Select the VirusScan Enterprise for Linux - On-Access Scanning Policy for the affected client.
- Remove all Windows path type exclusions and save the policy.
- Send an Agent WakeUp Call from ePO to the system. Ensure you select Force update of all local Tasks and Policies to apply new policies.
For unmanaged systems:
Remove the exclusion manually from each Linux system:
- Log on to the affected system with root access either locally or via terminal.
- Use the following command to stop all VSEL processes:
#/etc/init.d/nails stop
- Navigate to /var/opt/NAI/LinuxShield/etc and open the nailsd.cfg file in an editor such as VI.
- Locate and remove the following three lines for each exclusion:
Local exclusion example:
nailsd.profile.OAS.filter.6.path: C:\Program Files\Test\
nailsd.profile.OAS.filter.6.subdir: true
nailsd.profile.OAS.filter.6.type: exclude-path
ePO exclusion example:
nailsd.profile.OAS.filter.ePOexclusion_5.path: C:\Program Files\Test\
nailsd.profile.OAS.filter.ePOexclusion_5.subdir: true
nailsd.profile.OAS.filter.ePOexclusion_5.type: exclude-path
IMPORTANT: Ensure that you modify the policy on the ePO server to remove the exclusions as well. If they are not removed in the policy, they will be added again at the next policy enforcement.
- Use the following command to restart the Nails process:
#/etc/init.d/nails start
- Use the following command to check the status of the Nails process:
#/etc/init.d/nails status
This should return the following:
The McAfeeVSEForLinux daemon process is running: process information follows
