Cannot open file /lib/modules/5.9.13-1.el8.elrepo.x86_64/eset/efs/eset_rtp.ko: No such file or directory

[admin222 0]

 Realtime protection cannot start in web panel of antivirus.

I try https://help.eset.com/efs/7/en-US/realtime-protection-cannot-start.html. Didn't help.

Please help. We are corporate client. I try install file security for linux.

We have centos 8.

[kurco 24]

Hi admin222,

I can see that you are using elrepo kernel, sadly we are not officially supporting it. This is the main reason, why our real-time kernel module (eset_rtp.ko) is missing. During EFS installation we have also some dependencies, that are needed for eset_rtp.ko compilation, for centos default kernel, they are automatically installed. 

Now some better news, to get it working, you need to install elrepo kernel sources.
This command could be used (when elrepo is not enabled from configuration)
 

Quote

sudo yum --enablerepo=elrepo-kernel install kernel-ml-devel

Then after this installation, restart efs service

Quote

sudo systemctl restart efs

EFS will try to compile eset_rtp.ko again. After EFS is again running, check if eset_rtp.ko is loaded.

Quote

sudo lsmod | grep eset_rtp

Please keep in mind, that we are not officially supporting elrepo kernels, therefore I can't ensure you that everything will work correctly. Use EICAR sample (https://secure.eicar.org/eicar.com) to check if real-time events are correctly caught, it should be cleaned and reported in detections.  

Edited December 10, 2020 by kurco