Loading...

Knowledge Center


Global PassThru feature of Application and Change Control for Linux
Technical Articles ID:   KB90069
Last Modified:  12/13/2017

Environment

McAfee Application and Change Control for Linux (MACC) 6.x

Summary

Reboot Free Deactivation is a feature whose need is driven by strict system reboot schedules in the many complex customer environments MACC can be installed in. Although a complete disabling of MACC without a system reboot is technically not possible, a partial disable or a no-tracking state can be achieved without a reboot by using a special mode called Global Passthru mode.

Global Passthru mode is like the present-day pass through feature of MACC. The only difference is that it is applicable to all processes that run on a system, instead of selected processes. In this state, because everything is passed through, MACC monitors nothing and the system behaves as if it is in Disabled mode with the following exceptions:
  • MACC kernel modules remain loaded.
  • Minimal hooking/tracking continues.

Global Passthru mode is integrated with the basic solidifier functionality to provide an implicit reboot-free deactivation of the product. It does not require the customer to do anything extra. When the product is in Enable mode, and the command sadmin disable is run, Global Passthru mode is turned on in the product. After it is turned on, any process that runs on the system is passed through. When the sadmin status command is run, the following is displayed:
 
McAfee Solidifier: Disabled*
McAfee Solidifier on reboot: Disabled

Global Passthru mode can only be reached from Enable mode. A complete disable happens only after the system has been rebooted

NOTE: If MACC is ePO managed, running the Disable task immediately disables the protection regardless of the Reboot endpoint setting. If reboot is not selected, the Global Passthru mode is enabled until the next reboot and the Solidcore Status value is shown as Disabled.

A reboot is required to upgrade or uninstall the MACC client.

Rate this document

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.