IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: yara-connector fails to start

EDR: yara-connector fails to start

Environment

  • EDR Server: All Versions
  • CB Yara Connector: All Versions

Symptoms

When attempting to start the Yara Connector, the following error occurs:
error while loading shared libraries: libz.so.1

Cause

The /tmp mount point on the Linux OS is mounted with "noexec" flag.

Resolution

Mount the /tmp mount point with the "exec" flag. VMWare Carbon Black Support does not assist with this as it is a system administration task.

Additional Notes

The command to check if your /tmp mount point is configured with "noexec" flag is:
grep '\s/tmp' /etc/fstab

Labels (1)
Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎02-03-2021
Views:
595
Contributors