SC: Run commands stop when policy enforcement occurs

Technical Articles ID: KB91353
Last Modified: 5/19/2020

Environment

McAfee Application and Change Control (MACC) 8.2.1.143, 8.0.2.228 and later

Problem

SC: Run commands stop if policy enforcement occurs while the task is running. For example, resolidifying a system through the SC: Run command sadmin so. To prioritize policy enforcement, the task stops when policy is enforced or another full collect/send props happens.

Cause

In versions before 8.0.2.228, the command line interface (CLI) would enter a hung state waiting on a command to return a response to the IPC channel. All other commands are not allowed to run during this time. MACC 8.0.2.228 and later includes a feature that fails a command when the CLI has to wait longer than expected. Failing the command allows policy enforcement to be prioritized.

In ePolicy Orchestrator (ePO), the solidcore.log records:

cmdi_process.c: 845: Command 'sadmin so' returned 1019: Operation aborted".

Solution

Create an Application Control Client task (SC: Run command) with the following:

config set MaplCommLostRestart=0
so
config set MaplCommLostRestart=5
eu

This task sets the retry time on the command to 0 during the solidification. This setting prevents the solidification process from being stopped. The task then sets the retry time back to the default. This feature keeps the CLI from hanging.

Affected Products

Application and Change Control 8.2.x
Application and Change Control 8.1.x
Application and Change Control 8.0.x

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Knowledge Center

SC: Run commands stop when policy enforcement occurs

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

SC: Run commands stop when policy enforcement occurs

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title