Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 3 subscribers
  • Views 3217 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Deployment of Linux Antivirus directly to a console group

Kami Eradat

Hi,

Since it's very important for me to apply our company's policy as soon as possible following deployment,
I've been trying to create a .deb package for the Ubuntu clients that will automatically join the endpoints to the required group on the console.

The documentation states that this is done with the '--sec-group=' option on the mkinstpkg command.
While the console server hostname is "sophos-ec", and the group name is "InternalPolicy" (Image attached) I've tried:

/opt/sophos-av/update/mkinstpkg --sec-group='InternalPolicy' -D

/opt/sophos-av/update/mkinstpkg --sec-group='\InternalPolicy' -D

/opt/sophos-av/update/mkinstpkg --sec-group='\sophos-ec\InternalPolicy' -D

All of which did not succeed, and made the RMS service crash in subsequent installations of this package.

What am I missing?

Thanks in advance.



This thread was automatically locked due to age.
Parents
  • +1

    Hello Kami Eradat,

    the forum confirms that I have tested it (more than a year ago), not with a Debian package but this shouldn't make a difference. \server\Group\SubGroup is the format that used to work, you have to "shell-compliant" escape the string though. Please see Unable to set ... and SEC Groups and Linux Hosts. In light of this your third format should have worked - the --sec-group option is passed to install.sh in InstallOptions that's buried in the .deb package -> data.tar.gz -> savinstpkg.tgz -> . (besides uncdownload and install.sh).

    BTW: Which Ubuntu version - and you did run mkinstpkg on a "similar" distribution?

     

    Christian

Reply
  • +1

    Hello Kami Eradat,

    the forum confirms that I have tested it (more than a year ago), not with a Debian package but this shouldn't make a difference. \server\Group\SubGroup is the format that used to work, you have to "shell-compliant" escape the string though. Please see Unable to set ... and SEC Groups and Linux Hosts. In light of this your third format should have worked - the --sec-group option is passed to install.sh in InstallOptions that's buried in the .deb package -> data.tar.gz -> savinstpkg.tgz -> . (besides uncdownload and install.sh).

    BTW: Which Ubuntu version - and you did run mkinstpkg on a "similar" distribution?

     

    Christian

Children
  • 0 in reply to QC

    Hi Christian,

    I must have did a mistake while trying out the third option, but after getting your confirmation
    that this is the right format I focused on that and managed to pull it off.
    Thanks!
    BTW, for the record: I'm using Ubuntu 16.04 LTS, and running the mkinstpkg on the same client version.

     

    Best Regards,

    Kami

Unfiltered HTML