CBC: Error: Visual Studio / MS Build: Failed to write the updated manifest to the resource of file

[#1]

Environment

• CBC Windows Sensor: 4.0.0.1292 and all 3.9.x sensor versions
• CBC Console: All versions
• Microsoft Windows: All versions
• Microsoft Visual Studio / MS Build component: All versions

Symptoms

• Problem does not occur with the CBC Windows 3.8.x sensor version
• MS build jobs fail with an error similar to this dev environment error:

mt.exe : general error c101008d: Failed to write the updated manifest to the resource of file "..\..\output\bin\Debug\Platforms\Win32\Metro\{name_here}.dll". Access is denied.

Cause

This is issue DSEN-28051.

Resolution

1. In the CBC Console, edit the policy > sensor tab > bottom of the page add an Exclusion.
2. Select the radio button ‘All reporting and sensor operations’ 
3. Process Type > ‘Parent Process’ - ‘Attribute’  'Path’ - ‘Path’ should be the path to the devenv.exe executable file that invokes vcbuildhelper.exe. The path may be  similar to >   C:\Program Files (x86)\Microsoft Visual Studio 9.0\Common7\IDE\devenv.exe 
4. Under "-AND- select “Add another attribute” - ‘Process type’ > ‘Process’ - ‘Attribute’ > 'Path’ 
5. Set  ‘Path’  be the path to the vcbuildhelper.exe executable file. The path may be similar to > C:\Program Files (x86)\Microsoft Visual Studio 9.0\VC\vcpackages\VcBuildHelper.exe .
6. Check the ‘Inheritance’  descendent processes’ checkbox 
7. Click on ‘Next’ then "Save" twice.
8. Wait 15 minutes for the new exclusion to be processed in the backend and propagated down to the manifest rules of the sensor,  and test.

Related Content

CBC: Where is the documentation on when to use Policy permissions vs Core Preventions vs the new Eve...