"Safe" mode when using the updatable kernel module

If the application is unstable when using the updatable kernel module, after reaching the specified maximum number of abnormal halts, the application automatically switches to the "safe" mode (SafeMode=yes is set in the kesl.ini configuration file). By default, the application enters the "safe" mode after three abnormal halts. The maximum number of abnormal halts is configured in the PanicTracehold setting in the kesl.ini configuration file.

If the application is running in "safe" mode, the updatable kernel module does not start, and the application switches to fanotify for intercepting system events.

To continue using the updatable kernel module after resolving the problems with the application, you need to disable the "safe" mode.

To disable the "safe" mode of the application:

  1. Open the /var/opt/kaspersky/kesl/common/kesl.ini file for editing.
  2. In the [General] section, set SafeMode=no.
  3. Restart Kaspersky Endpoint Security:

    systemctl restart kesl

Page top