Table of Contents
< All Topics
Print

[AF] After uninstalling the Linux anti-tampering client, an error message appears when executing a command

Problem Description

System Linux system, an error message appears when executing a command after uninstalling Tamper Protection. As shown in the figure:

Effective troubleshooting steps

  1. According to the error message, an anti-tampering driver under /usr/lib64 is abnormal and the driver with this name is not found.
  2. You can see that there are so files with other names in the directory. Check the md5. If the md5 is consistent, it means that the actual files are the same.
  3. The error message is that the xxx file cannot be loaded. Try replacing it with the old file.
    cp  Existing driver name  Error message: Abnormal driver name

    After replacing it it's back to normal.

Root cause

Each time Anti-Tampering is installed, a driver named libsfguardxxxx.so will be generated in the /usr/lib64 directory. After uninstalling Anti-Tampering, the corresponding so file will be deleted. After reinstalling, some configuration files (sfguard.conf) are not updated, and it will try to reload the previous driver. Since the previous driver has been deleted, this error will occur.

solution

Manually generate a missing so file (proven feasible)
cp  Existing driver name  Error message: Abnormal driver name

Original Link

https://support.sangfor.com.cn/cases/list?product_id=13&type=1&category_id=925&isOpen=true