VirusScan Enterprise for Linux 1.6 Readme - McAfee

5. To confirm that the McAfee agent is runningcorrectly, type the following at the commandprompt:/etc/init.d/cma statusTo install VirusScan Enterprise for Linux:6. Download the rpm file.7. Type the following at the command prompt:rpm -ivh McAfeeVSEForLinux-1.6.0-.noarch.rpm8. Answer the questions when prompted. Accept thedefault values, or type your own.9. When prompted to start the VirusScan services,select the default option, "Y".10. To confirm that VirusScan Enterprise for Linuxis installed and running correctly, type thefollowing at the command prompt:/etc/init.d/nails statusTo install VirusScan Enterprise for Linux on NovelOpen Enterprise Server 1 or 2:1. From the Novell eDirectory server, use iManagerand create a user called "nails" and a groupcalled "nailsgroup".2. Add the user "nails" a member of the"nailsgroup". Enable the user and group usingthe Linux User Management.3. Provide "nails" user with administrativeprivileges on all the NSS volumes.NOTE:rights -f /media/nss/ -r s trustee nails..You need to provide administrative privileges tothe "nails" user, every time a new NSS volume iscreated.4. Download the MFErt.i686.rpm and MFEcma.i686.rpmfile.5. Install McAfee Runtime and McAfee Agent usingthe following commands:rpm -ivh MFErt.i686.rpmrpm -ivh MFEcma.i686.rpm6. Type the following at the command prompt:rpm -ivh McAfeeVSEForLinux-1.6.0-.noarch.rpm7. Type "nailsgroup" for the Linux group forVirusScan administrator.8. Type "nails" for the VirusScan user.9. Answer the questions when prompted. Accept thedefault values, or type your own.10. When prompted to start the VirusScan services,Page 4

select the default option, "Y".To install VirusScan Enterprise for Linux on Ubuntu8.04, 9.04, and 9.10 (Desktop/Server edition):NOTE:If you are installing VirusScan Enterprise forLinux on a 64-bit Ubuntu system, ensure that youperform the following steps beforeinstallation:a. Copy "pam_unix.so" from "/lib/security" of a32-bit ubuntu system to a temporary directory(/tmp) on the 64-bit ubuntu system.b. In the root directory, create a folder"pam32lib".c. Execute the following command to copy"pam_unix32.so" to the "pam32lib" directory:cp /tmp/pam_unix.so /pam32lib/pam_unix32.so1. Download the MFErt.i686.deb and MFEcma.i686.debfile.2. Install McAfee Runtime and McAfee Agent usingthe following commands:dpkg -i MFErt.i686.debdpkg -i MFEcma.i686.deb3. Type the following at the command prompt:dpkg -i McAfeeVSEForLinux-1.6.0-.noarch.deb4. Answer the questions when prompted. Accept thedefault values, or type your own.5. When prompted to start the VirusScan services,select the default option, "Y".6. To confirm that VirusScan Enterprise for Linuxis installed and running correctly, type thefollowing at the command prompt:/etc/init.d/nails statusSILENT INSTALLATIONNOTE:Before installing McAfee VirusScan Enterprisefor Linux, you must have McAfee Runtime andMcAfee Agent already installed on the computer.1. Create a file "nails.options" in the root homedirectory.For example:SILENT_ACCEPTED_EULA="yes"SILENT_INSTALLDIR="/opt/NAI/LinuxShield"SILENT_RUNTIMEDIR="/var/opt/NAI/LinuxShield"SILENT_ADMIN="admin@example.com"SILENT_HTTPHOST="192.168.255.200"SILENT_HTTPPORT="55443"Page 5

SILENT_MONITORPORT="65443"SILENT_SMTPHOST="example.example.com."SILENT_SMTPPORT="25"SILENT_NAILS_USER="nails"SILENT_NAILS_GROUP="nailsgroup"SILENT_CREATE_USER="no"SILENT_CREATE_GROUP="no"SILENT_RUN_WITH_MONITOR="yes"SILENT_QUARANTINEDIR="/quarantine"SILENT_START_PROCESSES="yes"SILENT_CONTINUE_INSTALL_ON_PAM_ERROR="no"NOTE:Use SILENT_CONTINUE_INSTALL_ON_PAM_ERROR onlywhen 32-bit PAM libraries are not present.If you set this flag to yes and continue withoutPluggable Authentication Module (PAM) libraries,the installation of VirusScan Enterprise forLinux monitor component is skipped, and the webinterface will not be available. However, youcan still manage the VirusScan Enterprise forLinux host using ePolicy Orchestrator or the webinterface of some other VirusScan Enterprise forLinux host. See information about configuringVirusScan Enterprise for Linux in the ProductGuide.2. As root, create a user "nails" as a member of agroup "nailsgroup".NOTE:Before installing VirusScan Enterprise forLinux, make sure that there is no user as"nails" and no group as "nailsgroup" in thecomputer.3. Type the following at the command prompt:rpm -ivh McAfeeVSEForLinux-1.6.0-.noarch.rpm4. After performing the installation, use thecommand "passwd" to assign a password to theuser "nails".To install VirusScan Enterprise for Linux on NovelOpen Enterprise Server 1 or 2 in Silent mode:1. From the Novell eDirectory server, use iManagerand create a user called "nails" and a groupcalled "nailsgroup".2. Add the user "nails" a member of the"nailsgroup". Enable the user and group usingthe Linux User Management.3. Provide "nails" user with administrativeprivileges on all the NSS volumes.NOTE:rights -f /media/nss/ -r s trustee nails..You need to provide administrative privileges tothe "nails" user, every time a new NSS volume iscreated.4. In the "nails.options" file, check if thefollowing parameters are available:Page 6

SILENT_NAILS_USER="nails"SILENT_NAILS_GROUP="nailsgroup"5. Type the following at the command prompt:rpm -ivh McAfeeVSEForLinux-1.6.0-.noarch.rpm6. After performing the installation, use thecommand "passwd" to assign a password to theuser "nails".To install VirusScan Enterprise for Linux on Ubuntu8.04, 9.04, and 9.10 (Desktop/Server edition):1. In the "nails.options" file, check if thefollowing parameters are available:SILENT_NAILS_USER="nails"SILENT_NAILS_GROUP="nailsgroup"2. Type the following at the command prompt:dpkg -i McAfeeVSEForLinux-1.6.0-.noarch.deb3. After performing the installation, use thecommand "passwd" to assign a password to theuser "nails".RUNNING VIRUSSCAN ENTERPRISE FOR LINUX1. From a supported web-browser, go to:https://:Specify the hostname or IP address of thecomputer, on which VirusScan Enterprise forLinux is installed. By default, the port numberis "55443".For example:https://192.168.200.200:55443(or)https://server1:554432. On the log on page, type the user name "nails"and type the password that you specified duringinstallation.TESTING YOUR INSTALLATIONYou can test the operation of the software byrunning the EICAR Standard AntiVirus Test File onany computer where you have installed the software.The EICAR Standard AntiVirus Test File is a combinedeffort by anti-virus vendors throughout the world toimplement one standard by which customers can verifytheir anti-virus installations.To test your installation:1. Copy the following line into its own file,making sure you do not include any spaces orline breaks. Save the file with the namePage 7

EICAR.COM.X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*The file size will be 68 or 70 bytes.2. Start your anti-virus software and allow it toscan the directory that contains EICAR.COM.When your software scans this file, it willreport finding the EICAR test file.3. Delete the file when you have finished testingyour installation to avoid alarming unsuspectingusers.IMPORTANT:Please note that this file is NOT A VIRUS.For more information on the EICAR test file, visit:http://www.eicar.orgINTEGRATING USING EPOLICY ORCHESTRATORNOTE:Before deploying VirusScan Enterprise for Linuxusing ePolicy Orchestrator, remove any previousversions of the LinuxShield software from theclient computer.1. Extract the McAfee VirusScan Enterprise forLinux v1.6 package(McAfeeVSEForLinux-1.6.0--release.noarch.tar.gz)on to a temporary directory.2. Check in the McAfee Agent(MSA-LNX_4.5.0_Package.ZIP) bundled with thispackage on to the ePolicy Orchestrator "Masterrepository".3. Check in"McAfeeVSEForLinux-1.6.0--EPO.ZIP" on tothe ePolicy Orchestrator "Master repository".4. Check in the following extensions on to theePolicy Orchestrator "Extensions":- EPOAGENTMETA.ZIP- LYNXSHLD1600.ZIP- LYNXSHLD1600PARSER.ZIP5. From the ePolicy Orchestrator server, copy"INSTALL.SH" and "INSTALLDEB.SH" from"C:\Program Files\McAfee\ePolicyOrchestrator\DB\Software\Current\EPOAGENT3700LYNX\Install\0409"to your Linux client.6. From the Linux terminal, execute the followingcommand:sh install.sh –iIncase of Ubuntu operating system, type:sh installdeb.sh –iPage 8

This will establish a connection between ePolicyOrchestrator and the Linux client computer.7. Create a Product Deployment Task on ePolicyOrchestrator to deploy McAfee VirusScanEnterprise for Linux, version 1.6.UNINSTALLATION1. To uninstall VirusScan Enterprise for Linux,type the following at the command prompt:rpm -e McAfeeVSEForLinuxrpm -e MFEcmarpm -e MFErtIf you want to uninstall from an Ubuntu system,type:dpkg --purge McAfeeVSEForLinuxdpkg --purge MFEcmadpkg --purge MFErt2. Reboot the computer to remove the LinuxShieldkernel modules.NOTE:You do not have to reboot the computerimmediately, because the VirusScan Enterprisefor Linux kernel modules does not interruptfunctioning of any other running service.__________________________________________________________KNOWN ISSUESTo view an updated list of issues associated withthis release, see KB68789 in the McAfee Supportonline KnowledgeBase: https://mysupport.mcafee.com.__________________________________________________________DOCUMENTATIONThis product includes the following documentationset:- Installation GuideSystem requirements and instructions forinstalling and starting the software.- Product GuideIntroduction to the product and its features;detailed instructions for configuring thesoftware; information on deployment, recurringtasks, and operating procedures.- HelpHigh-level and detailed information accessedfrom the software application.- Configuration GuideFor use with ePolicy Orchestrator(R). Proceduresfor managing McAfee VirusScan Enterprise forLinux through the ePolicy Orchestratormanagement software.- Release Notes (this ReadMe file)Page 9

- LICENSE AgreementThe McAfee License Agreement booklet thatincludes all of the license types you canpurchase for your product. The License Agreementpresents general terms and conditions for use ofthe licensed product.- CONTACTSContact information for McAfee services andresources: technical support, customer service,Security Headquarters (AVERT), beta program, andtraining. A text file is included with thesoftware application and on the product CD.__________________________________________________________FINDING PRODUCT DOCUMENTATIONMcAfee provides the information you need during eachphase of product implementation, from installationto daily use and troubleshooting. After a product isreleased, information about the product is enteredinto the McAfee online KnowledgeBase.1. Go to the McAfee Technical Support ServicePortalat http://mysupport.mcafee.com.2. Under Self Service, access the type ofinformation you need:For user documentation:1. Click "Product Documentation."2. Select a "Product," then select a"Version."3. Select a product document.For the KnowledgeBase:- Click "Search the KnowledgeBase" foranswers to your product questions.- Click "Browse the KnowledgeBase" forarticles listed by product and version.__________________________________________________________COPYRIGHTCopyright (C) 2010 McAfee, Inc. All Rights Reserved.No part of this publication may be reproduced,transmitted, transcribed, stored in a retrievalsystem, or translated into any language in any formor by any means without the written permission ofMcAfee, Inc., or its suppliers or affiliatecompanies.__________________________________________________________TRADEMARK ATTRIBUTIONSAVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE,GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEESECURITYALLIANCE EXCHANGE), MCAFEE, NETSHIELD,PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE,SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN, WEBSHIELDare registered trademarks or trademarks of McAfee,Inc. and/or its affiliates in the US and/or othercountries. McAfee Red in connection with security isdistinctive of McAfee brand products. All otherregistered and unregistered trademarks herein arethe sole property of their respective owners.Page 10

__________________________________________________________LICENSE INFORMATIONLICENSE AGREEMENTNOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATELEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOUPURCHASED, WHICH SETS FORTH THE GENERAL TERMS ANDCONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IFYOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVEACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATEDLICENSE GRANT OR PURCHASE ORDER DOCUMENTS THATACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVERECEIVED SEPARATELY AS PART OF THE PURCHASE (AS ABOOKLET, A FILE ON THE PRODUCT CD, OR A FILEAVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADEDTHE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OFTHE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALLTHE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THEPRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR AFULL REFUND.V3.1.9Page 11