Configuring the OSnova operating system for the application to work

For OSnova 2.4

To prepare a device with the OSnova 2.4 operating system for remote installation of the Network Agent:

  1. Open the /etc/systemd/logind.conf file and in the [Login] sectiom, comment out the #KillUserProcesses=yes line.
  2. Open the file /usr/lib/NESS/pam-user-session and comment out the #loginctl terminate-session "$XDG_SESSION_ID" line.

To run the application on the OSnova 2.4 operating system:

  1. Open the /etc/NESS/systemd/kesl.service.config file and set NESSCTX_MODIFY=t+ADDEQUSOCK,OMIT,70,SSUID_SAVE_CTX_PERMANENT".
  2. Refresh the service settings by running the systemctl daemon-reload command.
  3. If you want to run process memory and kernel memory scans, you need to disable the mprotect (or PaX) memory protection in the kernel, that is, add mprotect=off to the kernel command line parameters. For more details, please refer to the OSnova documentation.
  4. Restart the operating system.

After installing the graphical interface (the kesl-gui package), run the following commands on the command line as root:

rm /etc/xdg/autostart/kaspersky-kesl.desktop

cp /opt/kaspersky/kesl/resource/autostart.desktop /etc/xdg/autostart/kaspersky-kesl.desktop

rm /usr/share/applications/kaspersky-kesl.desktop

cp /opt/kaspersky/kesl/resource/app.desktop /usr/share/applications/kaspersky-kesl.desktop

rm /usr/share/autostart/kaspersky-kesl.desktop

cp /opt/kaspersky/kesl/resource/autostart.desktop /usr/share/autostart/kaspersky-kesl.desktop

rm /usr/share/kde4/services/ServiceMenus/kaspersky-kesl.desktop

cp /opt/kaspersky/kesl/resource/kde.desktop /usr/share/kde4/services/ServiceMenus/kaspersky-kesl.desktop

rm /usr/share/kservices5/ServiceMenus/kaspersky-kesl.desktop

cp /opt/kaspersky/kesl/resource/kde.desktop /usr/share/kservices5/ServiceMenus/kaspersky-kesl.desktop

rm /usr/share/Thunar/sendto/kaspersky-kesl.desktop

cp /opt/kaspersky/kesl/resource/sendto.desktop /usr/share/Thunar/sendto/kaspersky-kesl.desktop

For OSnova 2.5.1 and later

To prepare a device with the OSnova operating system 2.5.1 and later for remote installation of the Network Agent:

  1. Open the file /usr/lib/systemd/logind.conf.d/10-enable-kill-user-processes.conf and in the [Login] section, comment out the #KillUserProcesses=yes line.
  2. Open the file /usr/lib/NESS/pam-user-session and comment out the #loginctl terminate-session "$XDG_SESSION_ID" line.

To run the application on the OSnova operating system 2.5.1 and later:

  1. Open the /etc/NESS/systemd/kesl.service.config file and set NESSCTX_MODIFY="t+ADDEQUSOCK,OMIT,OMIT_PID,SSUID_SAVE_CTX_PERMANENT".
  2. Refresh the service settings by running the systemctl daemon-reload command.
  3. Open the file /etc/sysctl.d/30-disable-ptrace.conf and set kernel.yama.ptrace_scope=0.
  4. If you want to run process memory and kernel memory scans, you need to disable the mprotect (or PaX) memory protection in the kernel, that is, add mprotect=off to the kernel command line parameters. For more details, please refer to the OSnova documentation.
  5. Restart the operating system.

When installing Kaspersky Endpoint Security on a device with OSnova 2.14 or later version, you may encounter an error, "dpkg: error processing package kesl (--install): installed kesl package post-installation script subprocess returned error exit status 1" because of the two SUPPORT_URL lines in the /etc/os-release file. For the application to install correctly, you need to delete one of the two SUPPORT_URL lines in the /etc/os-release file.

Page top