User manual F-SECURE ANTI-VIRUS LINUX SERVER SECURITY ADMINISTRATOR GUIDE

[. . . ] F-Secure Anti-Virus Linux Server Security Administrator's Guide "F-Secure" and the triangle symbol are registered trademarks of F-Secure Corporation and F-Secure product names and symbols/logos are either trademarks or registered trademarks of F-Secure Corporation. All product names referenced herein are trademarks or registered trademarks of their respective companies. F-Secure Corporation disclaims proprietary interest in the marks and names of others. Although F-Secure Corporation makes every effort to ensure that this information is accurate, F-Secure Corporation will not be liable for any errors or omission of facts contained herein. [. . . ] How can I get the F-icon visible in the systray?You may need to logout and login again to get the F-icon in your systray. If you are using Gnome Desktop, make sure you have a notification area in your Gnome Panel. How do I enable the debug log for the web user interface?Change /opt/f-secure/fsav/tomcat/bin/catalina. sh from: #CATALINA_OUT="$LOGS_BASE"/catalina. out CATALINA_OUT=/dev/null to: CATALINA_OUT="$LOGS_BASE"/catalina. out #CATALINA_OUT=/dev/null The logfile is in /var/opt/f-secure/fsav/tomcat/catalina. out. CHAPTER E Troubleshooting 95 E. 2 F-Secure Policy Manager Q. How can I use F-Secure Linux Server Security with F-Secure Policy Manager 6. 0x for Linux?F-Secure Policy Manager Server has to be configured to retrieve new riskware and spyware databases for the product. Note that these instructions apply to F-Secure Policy Manager Server 6. 0x for Linux only, the product is not compatible with other Linux or Windows F-Secure Policy Manager Server versions. Add a line to the /etc/opt/f-secure/fspms/fspms-fsauasc. conf file by running this command: echo "avpe=republish" >> /etc/opt/f-secure/fspms/ fspms-fsauasc. conf E. 3 Integrity Checking Q. Symlinks are not working for Integrity Checking or Rootkit Protection, what can I do?You may be denied to load a kernel module if the file containing the kernel module is a symlink and the real file where the symlink points to is not in the Integrity Checking baseline. The same applies if modprobe or insmod utilities (the module loaders) use files or libraries which are symlinks and the file where the symlink points to is not in the baseline. For example, modprobe uses /lib/libz. so. 1, which is really a symlink to a real file /lib/libz. so. 1. 2. 2. The symlink is in the baseline but the real file is not. In this case, modprobe is not allowed to run as it tried to open a file that is not in the baseline. You should never add only symlinks to the baseline, you should always add both the symlink and the real file where the symlink points. 96 Q. I forgot to use Software Installation Mode and my system is not working properly. Execute the following commands: /opt/f-secure/fsav/bin/fslistfiles | fsic --add fsic --baseline Q. Can I update the Linux kernel when I use Integrity Checking?After you have updated the kernel, disable the Software Installation Mode to restore the normal protection level. For more information, see "Software Installation Mode", 62. There are too many modified files to update with the user interface. [. . . ] # installationDirectory /opt/f-secure/fssp # # Unix time() when installation done. # installationTimestamp 0 # # F-Secure internal. Text to be printed every day during # evaluation use. # naggingText EVALUATION VERSION - FULLY FUNCTIONAL - FREE TO USE FOR 30 DAYS. \nTo purchase license, please check http://www. F-Secure. com/purchase/\n # # F-Secure internal. [. . . ]