Preparing a device running a Linux operating system with glibc 2.5 for installation of Network Agent

Prior to the installation of Kaspersky Industrial CyberSecurity for Linux Nodes and Network Agent on a device running a Linux operating system with glibc 2.5, you must perform two preparation procedures—general preparation steps for any Linux device and the procedure described in this article.

You may also consider other methods of installing Network Agent on such devices, for example, local installation.

Run the commands provided in this procedure under an account with root privileges.

To prepare a device running a Linux operating system with glibc 2.5:

1. On the device running a Linux operating system with glibc 2.5, perform the preparation steps common for any Linux device.
2. In the /etc/sudoers file, remove the line Defaults requiretty.
3. Disable the allowlist of valid encryption algorithms for SSH connections to be able to install Network Agent on the device running a Linux operating system with glibc 2.5.

   To do this, on the device with Administration Server installed, or on a device acting as a distribution point whose scope includes the target device, run the following command in the command line:

   klscflag -fset -pv ".core/.independent" -s "Transport" -n SSH_CLIENT_DISABLE_ALGS_PROTECT -t d -v 1

   Disabling the allowlist of valid encryption algorithms may affect the security of the SSH connection. We strongly recommend that you re-enable the allowlist of valid encryption algorithms immediately after installing Network Agent.

The Linux device is ready for installation of Network Agent. You can install Network Agent remotely, in interactive mode, or in silent mode.

Page top