Environment
- EDR(Formerly Carbon Black Response) Server: All Supported Versions
- EDR Sensor: 7.0.3
Symptoms
- Upgrade to 7.0.3 sensor fails
- The cbdaemon is not started and the module is not loaded.
root@ajoya-sensor-centos75 622]# cbdaemon -v
CbDaemon version 7.0.3.15300 Apr 15 2021 14:29:59
[root@ajoya-sensor-centos75 622]# service cbdaemon status
Redirecting to /bin/systemctl status cbdaemon.service
● cbdaemon.service - Startup/shutdown script for VMware Carbon Black EDR Sensor
Loaded: loaded (/etc/systemd/system/cbdaemon.service; enabled; vendor preset: disabled)
Active: inactive (dead) since Tue 2021-06-29 16:11:42 EDT; 30min ago
Jun 29 16:04:49 ajoya-sensor-centos75 systemd[1]: Starting Startup/shutdown script for Carbon Black Response Sensor...
Jun 29 16:04:49 ajoya-sensor-centos75 systemd[1]: Started Startup/shutdown script for Carbon Black Response Sensor.
[root@ajoya-sensor-centos75 622]# ps ax | grep cbdaemon
14552 pts/0 S+ 0:00 grep --color=auto cbdaemon
[root@ajoya-sensor-centos75 622]# lsmod | grep cbsensor
[root@ajoya-sensor-centos75 622]# rpm -qa | grep cbsensor
cbsensor-7.0.3.15300-1.x86_64
[root@ajoya-sensor-centos75 622]#
Cause
Known bug with 7.0.3 Linux sensor version.
Resolution
Fixed in Linux sensor version 7.1.0
Related Content
