Local mountpoints that point to local folders display undesired behaviors on Linux
Last Modified: 2024-01-29 10:27:47 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
After December 1, 2024, please log in to the Thrive Portal for support, knowledge articles, tools, and downloads. For information about using the Thrive Portal, view the Trellix Thrive Portal User Guide.
Local mountpoints that point to local folders display undesired behaviors on Linux
Technical Articles ID:
KB92352
Last Modified: 2024-01-29 10:27:47 Etc/GMT Environment
Application and Change Control (ACC) 6.x
Problem
Several ACC commands display an undesired output when the commands are run against local mountpoints in a system. The following are examples of related issues as documented in KB84047 - Application Control 6.x Known Issues:
Cause
If two different paths point to the same physical files, issues are displayed in several ACC actions that depend on the real file paths. Example: Inventory check, rule matching, and updaters. Examples of this kind of mountpoints are bind mounts and Solution
Currently, there's no solution for this environment.
Workaround
Use the real file paths for the rules and ACC command parameters. Also, consider the possible symptoms documented in the Known Issues article to discard false positives in command failures.
Affected ProductsLanguages:This article is available in the following languages: |
|