Configuring the OSnova operating system for the application to work

To prepare a device with the OSnova operating system for remote installation of the Network Agent:

  1. Open the file /usr/lib/systemd/logind.conf/10-enable-kill-user-processes.conf and in the [Login] section, comment out the #KillUserProcesses=yes line.
  2. Open the file /usr/lib/NESS/pam-user-session and comment out the #loginctl terminate-session "$XDG_SESSION_ID" line.

To run the application on the OSnova operating system:

  1. Open the /etc/NESS/systemd/kesl.service.config file and set NESSCTX_MODIFY="t+ADDEQUSOCK,OMIT,OMIT_PID,SSUID_SAVE_CTX_PERMANENT".
  2. Refresh the service settings by running the systemctl daemon-reload command.
  3. Open the file /etc/sysctl.d/30-disable-ptrace.conf and set kernel.yama.ptrace_scope=0.
  4. If you want to run process memory and kernel memory scans, you need to disable the mprotect (or PaX) memory protection in the kernel, that is, add mprotect=off to the kernel command line parameters. For more details, please refer to the OSnova documentation.
  5. Restart the operating system.
Page top