Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 9 replies
  • Answers 1 answer
  • Subscribers 3 subscribers
  • Views 16380 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

sav-rms stopped and update failed

Alexander Müller2

Hallo,

ich bin nicht ganz sicher ob ich hier richtig bin.

Ich habe versucht Sophos Endpoint and Server for Linux auf meinem Gentoo zu installieren.

Nach umstellen auf fanotify zeigt

# ./savdstatus  
Sophos Anti-Virus is active and on-access scanning is running

Soweit so gut, aber leider zeigt:

# rc-status

sav-rms       [  stopped  ]

Bei einem manuellen Start kommt diese Meldung:

/etc/init.d/sav-rms -v start
 * Executing: /lib/rc/sh/openrc-run.sh /lib/rc/sh/openrc-run.sh /etc/init.d/sav-rms start
 * Starting RMS ...                                                                                                   [ !! ]
 * ERROR: sav-rms failed to start

Und ein Update schlägt fehl mit der Meldung:

Updating from versions - SAV: 9.13.2, Engine: 3.68.0, Data: 5.39
Update aborted.
Failed to load virus data [0xffffffff80040220]
Updating Sophos Anti-Virus....
Updating Command-line programs
Updating SAVScan on-demand scanner
Updating Builtin Configuration
Updating sav-protect startup script
Updating sav-rms startup script
Updating Sophos Anti-Virus Daemon
Updating Remote Management Daemon
Updating Manifest
Failed to update Sophos Anti-Virus

Vielleicht hat jemand eine Idee, ich wäre für jeden Tip dankbar.

VG



This thread was automatically locked due to age.
Parents
  • +1

    Hi Alexander,

    I'm afraid I don't speak German, so had to run your question through Google translate. I hope you can understand my English.

    The version you have is too old, and 9.17.2 can't upgrade from such an old version.

    You need:

    1. An up to date 9.17.2 installer
    2. An update source (e.g. CID) that contains 9.17.2

    The error code ending on 220 means that the engine wasn't able to find the main virus data. The updater runs a check that the new engine can load the new data before we try to use it.

    However also note that SAV is retiring in 2023: See https://support.sophos.com/support/s/article/KB-000034795?language=en_US

    It is replaced by SSPL managed and installed from Sophos Central. SSPL required systemd however, so probably won't work on your system.

    Thanks,

    Douglas.

  • 0 in reply to DouglasLeeder

    Hello Douglas,

    i am in contact with our Support, and i hope they will supply me the needed version. I could change my system to systemd but i am not sure if its worth it, get used to openrc for a couple of years now, and i do not know yet, if we can purchase the new version in our softwareshop later in 2023. Time will tell.

    So thank you and Christian for your help.

    Kind regards, Alex

Reply
  • 0 in reply to DouglasLeeder

    Hello Douglas,

    i am in contact with our Support, and i hope they will supply me the needed version. I could change my system to systemd but i am not sure if its worth it, get used to openrc for a couple of years now, and i do not know yet, if we can purchase the new version in our softwareshop later in 2023. Time will tell.

    So thank you and Christian for your help.

    Kind regards, Alex

Children
Unfiltered HTML