User manual F-SECURE ANTI-VIRUS LINUX CLIENT SECURITY ADMINISTRATOR GUIDE

[. . . ] F-Secure Anti-Virus Linux Client Security Administrator's Guide "F-Secure" and the triangle symbol are registered trademarks of F-Secure Corporation and F-Secure product names and symbols/logos are either trademarks or registered trademarks of F-Secure Corporation. All product names referenced herein are trademarks or registered trademarks of their respective companies. F-Secure Corporation disclaims proprietary interest in the marks and names of others. Although F-Secure Corporation makes every effort to ensure that this information is accurate, F-Secure Corporation will not be liable for any errors or omission of facts contained herein. [. . . ] Install the product normally. A. 5 Turbolinux 10 Turbolinux kernel sources may not be configured and so they cannot be used to compile kernel drivers. To fix this, run the following command in the kernel source tree: make oldconfig B Installing Required Kernel Modules Manually Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 Before Installing Required Kernel Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 Installation Instructions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 81 82 B. 1 Introduction This section describes how to install required kernel modules manually. You may need to do this in the following cases: > > You forgot to use Software Installation Mode and the system is not working properly. In large installations some hosts may not include development tools or kernel source. B. 2 Before Installing Required Kernel Modules Before installing required kernel modules, you must do the following: > > Make sure that the running kernel version is the same as the version of the kernel sources installed. The kernel configuration must also be the same. On some distributions, such as older SUSE distributions, you may need to go to /usr/src/linux and run commands make cloneconfig and make modules_prepare before the kernel sources match the installed kernel. B. 3 Installation Instructions Follow the instructions below to install required kernel modules: 1. Run the following command as the root user: /opt/f-secure/fsav/bin/fsav-compile-drivers 2. If the summary page in the user interface does not show any errors, the product is working correctly. CHAPTER B Installing Required Kernel Modules Manually fsav-compile-drivers is a shell script that configures and compiles the Dazuko driver automatically for your system and for the product. For more information on the Dazuko driver, visit www. dazuko. org. You can download the Dazuko driver from www. dazuko. org and use it with the product, but it is not recommended. The product has been extensively tested only with the Dazuko version that ships with the product, which is installed in /opt/f-secure/fsav/ dazuko. tar. gz. If your Linux distribution has a preinstalled Dazuko, it cannot be used as Dazuko depends on the included patches and configuration options, which are likely different in the preinstalled Dazuko. Uninstall the preinstalled Dazuko or make sure that it is not run during the system startup and follow the installation instructions above to install Dazuko with all required patches and configuration options. 83 C List of Used System Resources Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 Installed Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 Network Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 Memory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 CPU. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 84 CHAPTER C List of Used System Resources 85 C. 1 Overview This appendix summarizes the system resources used by the product. C. 2 Installed Files All files installed by the product are in the following directories: /opt/f-secure /etc/opt/f-secure /var/opt/f-secure In addition, the installation creates the following symlinks: /usr/bin/fsav -> /opt/f-secure/fssp/bin/fsav /usr/bin/fsic -> /opt/f-secure/fsav/bin/fsic /usr/bin/fsui -> /opt/f-secure/fsav/bin/fsui /usr/share/man/man1/fsav. 1 -> /opt/f-secure/fssp/man/fsav. 1 /usr/share/man/man8/fsavd. 8 -> /opt/f-secure/fssp/man/fsavd. 8 C. 3 Network Resources When running, the product reserves the following IP ports: Interface lo Protocol tcp Port 28005 Comment Web User Interface internal communication port PostgreSQL alert database Local Web User Interface access Remote SSL Web User Interface access (if enabled) lo lo any tcp tcp tcp 28078 28080 28082 86 C. 4 Memory The Web User Interface reserves over 200 MB of memory, but since the WebUI is not used all the time, the memory is usually swapped out. The other product components sum up to about 50 MB of memory, the on-access scanner uses the majority of it. [. . . ] (Yes, No, All yes, Disregard new entries) If file has been modified fsic will ask [Note] /bin/ls seems to differ from baselined entry. RETURN VALUES fsic has the following return values. Normal exit 1Error in invocation, baselining or verification CHAPTER E 163 2No baseline exists yet. Return value of 3 indicates that one or more of the following happened; * Incorrect passphrase, or * Files do not match baselined information, or * A virus was detected in one of the files FILES None. [. . . ]