To build the Access Protection kernel module:
- Install the kernel source and development tools.
- For Debian-based systems:
sudo apt-get install gcc
sudo apt-get install build-essential
sudo apt-get install linux-headers-$(uname -r)
- For Red Hat (RPM) based systems:
sudo yum groupinstall 'Development Tools'
sudo yum install kernel-devel-$(uname -r)
- For SUSE (RPM) based systems:
sudo zypper install -t pattern devel_C_C++
sudo zypper install kernel-default-devel
NOTES:
- If these commands fail, you might be missing some compiler packages. To use the pattern to install the missing compiler packages, enable the SUSE Package Hub in the SUSE manager/YaST, to see and then use the devel_C_C++ pattern.
- Required Packages:
- gcc
- make
- kernel-default-devel
- To build and load the Access Protection kernel module, restart Threat Prevention:
- Stop Threat Prevention:
ENSLTP 10.6.6 and later, including 10.7.x:
/opt/McAfee/ens/tp/init/mfetpd-control.sh stop
ENSLTP 10.6.5 and earlier:
/opt/isec/ens/threatprevention/bin/isectpdControl.sh stop
- Start Threat Prevention:
ENSLTP 10.6.6 and later, including 10.7.x:
/opt/McAfee/ens/tp/init/mfetpd-control.sh start
ENSLTP 10.6.5 and earlier:
/opt/isec/ens/threatprevention/bin/isectpdControl.sh start
- Check the Access Protection status:
ENSLTP 10.6.6 and later, including 10.7.x:
/opt/McAfee/ens/tp/bin/mfetpcli --getapstatus
ENSLTP 10.6.5 and earlier:
/opt/isec/ens/threatprevention/bin/isecav --getapstatus
Verify that the Access Protection kernel module is loaded:
lsmod |grep mfeaac
Example:
mfeaack_100600201 127250 2