ESET Endpoint Antivirus 7.1.8.0 on Ubuntu 20.04 | ERROR "Real-time file system protection is non-functional"

[avielc 52]

Hi all, 
If anyone runs into that error, I'd really be happy to know what can be done to fix it. 
 

The eea service seems to be running, but the agent is reporting its not working. 

I'll skip to the bottom line. 

Turns out that "secure boot" doesn't mix well with it. 
once disabled it can work, (i noticed something in the debug logs about "kernel lockdown .7? " )

I'd love to hear the Moderators\staff for any info about it. 

Thanks!

[Marcos 4,909]

Currently Endpoint v7 doesn't support Secure boot but it should in the future (there is no ETA yet).

[avielc 52]

On 12/30/2020 at 6:01 PM, Marcos said:

Currently Endpoint v7 doesn't support Secure boot but it should in the future (there is no ETA yet).

Thanks Marcos, I needed to have that piece of info to resolve the issue (turning off secure boot on BIOS) 
such an annoying little thing, and I really had to scavenge these logs to find that bit of info about it.

[avielc 52]

Hi, 
I'm reopening this:
got the following error on a system I made sure secure boot is disabled: 
 

 confd[35403]: ESET Endpoint Antivirus Debug: Application socket 2531725551373760: usage for user 996: 1 connection(s)                                   
 confd[35403]: ESET Endpoint Antivirus Debug: Invalid CfgModuleRegisterCallbackRequest on path plugins.01000600.settings.GlobalScanner, error 7020       
 confd[35403]: ESET Endpoint Antivirus Debug: Application socket 2531725551373760: usage for user 996: 1 connection(s)                                   
 scand[35418]: ESET Endpoint Antivirus Debug: NODMEM: /var/opt/eset/eea/lib/em003_64.dat(0x31b000, 0xde000, 0x1a000) = 0x7f5901624000                    
 scand[35418]: ESET Endpoint Antivirus Debug: NODMEM: /var/opt/eset/eea/lib/em052_64.dat(0x5b000, 0xb000, 0x6000) = 0x7f59015b8000                       
 scand[35418]: ESET Endpoint Antivirus Debug: NODMEM: /var/opt/eset/eea/lib/em002_64.dat(0x0, 0x7387000, 0x0) = 0x7f58fa231000                           
 scand[35418]: ESET Endpoint Antivirus Debug: NODMEM: /var/opt/eset/eea/lib/em002_64.dat(0x1d8000, 0x81000, 0x1d000) = 0x7f58f9fbb000                    
 scand[35418]: ESET Endpoint Antivirus Debug: NODMEM: /var/opt/eset/eea/lib/em004_64.dat(0x2d6000, 0x345000, 0x1d000) = 0x7f58f9983000                   
 confd[35403]: ESET Endpoint Antivirus Debug: Application socket 2531725551373760: usage for user 996: 1 connection(s)                                   
 confd[35403]: ESET Endpoint Antivirus Debug: Application socket 2531725551373760: usage for user 996: 1 connection(s)                                   
 confd[35403]: ESET Endpoint Antivirus Debug: Application socket 2531725551373760: usage for user 996: 1 connection(s)                                   
 confd[35403]: ESET Endpoint Antivirus Debug: Application socket 2531725551373760: usage for user 996: 1 connection(s)                                   
 confd[35403]: ESET Endpoint Antivirus Debug: Application socket 2531725551373760: usage for user 996: 1 connection(s)                                   
 confd[35403]: ESET Endpoint Antivirus Debug: Application socket 2531725551373760: usage for user 996: 1 connection(s)                                   
 confd[35403]: ESET Endpoint Antivirus Debug: Application socket 2531725551373760: usage for user 996: 1 connection(s)                                   
 confd[35403]: ESET Endpoint Antivirus Debug: Application socket 2531725551373760: usage for user 996: 1 connection(s)                                   
 confd[35403]: ESET Endpoint Antivirus Debug: Application socket 2531725551373760: usage for user 996: 1 connection(s)                                   
 confd[35403]: ESET Endpoint Antivirus Debug: Application socket 2531725551373760: usage for user 996: 1 connection(s)                                   
 scand[35418]: ESET Endpoint Antivirus Debug: NODMEM: /var/opt/eset/eea/lib/em000_64.dat(0x1c000, 0x6000, 0x2000) = 0x7f58f8038000                       

Any ideas why I keep getting :
 

adding another piece of log: 
 

 logd[36759]: ESET Endpoint Antivirus Debug: NODMEM: /var/opt/eset/eea/lib/em000_64.dat(0x1c000, 0x6000, 0x2000) = 0x7f6e9f5f1000                                                         
 logd[36759]: ESET Endpoint Antivirus Debug: Application socket 2537354074143300: usage for user 995: 0 connection(s)                                                                     
 confd[36765]: ESET Endpoint Antivirus Debug: Application socket 2531747610133760: usage for user 995: 0 connection(s)                                                                    
 confd[36765]: ESET Endpoint Antivirus Debug: Application socket 2531747610133760: usage for user 995: 0 connection(s)                                                                    
 startd[36756]: ESET Endpoint Antivirus Debug: NODMEM: /var/opt/eset/eea/lib/em000_64.dat(0x1c000, 0x6000, 0x2000) = 0x7f1186743000                                                       
 startd[36756]: ESET Endpoint Antivirus Debug: Process /opt/eset/eea/lib/oaeventd[36771] has been created.                                                                                
 startd[36756]: ESET Endpoint Antivirus Debug: Process /opt/eset/eea/lib/scand[36780] has been created.                                                                                   
 oaeventd[36771]: ESET Endpoint Antivirus Error: Cannot open file /lib/modules/5.8.0-36-generic/eset/eea/eset_rtp.ko: No such file or directory                                           
 oaeventd[36771]: ESET Endpoint Antivirus Error: Initialization of system handler for on-access scan has failed. Please update your OS and restart your computer, then check system logs. 
 oaeventd[36771]: ESET Endpoint Antivirus Debug: NODMEM: /var/opt/eset/eea/lib/em000_64.dat(0x1c000, 0x6000, 0x2000) = 0x7efeb4110000                                                     
 oaeventd[36771]: ESET Endpoint Antivirus Debug: NODMEM: /var/opt/eset/eea/lib/em000_64.dat(0x1c000, 0x6000, 0x2000) = 0x7efeb4110000                                                     

 

Some info on the machine:
New Dell Latitude 7410.

Ubuntu 20.04.1 LTS

 

Thanks @Marcos

Edited January 10, 2021 by avielc
adding extra log just after restarting EEA

[Marcos 4,909]

Please collect logs as per https://support.eset.com/en/kb6159 and open a support ticket with your local ESET distributor.

[avielc 52]

Got it

Thanks Marcos!

[avielc 52]

Updating - I sent the logs + the extended logs (Allowing logging + collect logs again) hopefully I'll get some answers soon

 

Thanks again @Marcos