Sophos EP Linux creates sophos-spl-network user on some machines

Question

Hi, 
 since a view Days my monitoring alarms me that a user named sophos-spl-network is created. This happend not on all my machines. 
 Why is this happens ? 
 And - more interesting - is this a feature from Sophos? 
 Sincerely 
 Tobias

Qoosh · Accepted Answer

Hi Sophos User6351 , 
 Thanks for reaching out to the Sophos Community Forum. 
 In the latest release of Sophos Protection Linux 2023.2 the service account "sophos-spl-network" will be removed. If some of your devices do still have this user account. I suggest checking the following log "/opt/sophos-spl/logs/base/suldownloader.log" to verify that the system is updating correctly. 
 You can also check the version that's installed currently from Sophos Central. If you were to run the following command locally, you will see "SPL-Base-Component: 1.2.4.30" for the latest version. - /opt/sophos-spl/bin/version

Sophos User6351 · Answer

Hi, 
 I checked versions via central and it looks good. Seems that the Distriubution of the new Version was not happend in a close timeframe in my installations so my aide reports different changes. 
 thx!!! 
 Tobias Fischer

Sophos EP Linux creates sophos-spl-network user on some machines

Top Replies