To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Error installing F-Secure Linux Security 64 on Debian 11

Daniel_CDT
Daniel_CDT Posts: 4 Security Scout
edited February 12 in Linux Products

I get the following error message when installing F-Secure Linux Security 64 on Debian 11 according to the manual:

Selecting previously unselected package f-secure-linuxsecurity.
(Reading database ... 66812 files and directories currently installed.)
Preparing to unpack .../f-secure-linuxsecurity.deb ...
Unpacking f-secure-linuxsecurity (12.0.50-1) ...
Setting up f-secure-linuxsecurity (12.0.50-1) ...

Installing WithSecure Linux Security 64
2023-04-27 14:58:16 src/verifymanifest.c:127[6] DAAS2 manifest verification failed, error 5
2023-04-27 14:58:16 src/fsbootstrap.c:221[7] DAAS2 signature verification failed
setup: failed to install FSBG: exit status 2
2023-04-27 14:58:16 src/fsbootstrap.c:466[7] executing '/opt/f-secure/linuxsecurity/download/linuxsecurity-1200-linux-x86_64/1682421514/content/setup' failed, result 256
2023-04-27 14:58:16 src/fsbootstrap.c:228[7] install failed
activate: activation failed: exit status 2
Failed to activate the product!

What does that message mean?

Answers

  • Sethu Laks
    Sethu Laks Staff, Moderator Posts: 288 W/ Moderator

    Hi @Daniel_CDT

    Thank you for reaching out to WithSecure Community!

    According to your error message above, we've received similar cases from other customers in the past. This may be caused by the absence of "SELINUXTYPE=targeted" in the configuration.

    Note that SELINUX can be any value, but SELINUXTYPE must be set to "targeted".

    Reinstallation is required after fixing the value. 

    1. Uninstall Linux Security 64
    2. Remove Linux Security folders (rm -rf /opt/f-secure /etc/opt/f-secure /var/opt/f-secure)
    3. Add SELINUXTYPE=targeted to the config file /etc/selinux/config
    4. Reboot system (recommended)
    5. Install Linux Security 64

    In case, SELinux is not used at all, but only the SELinux software is installed? It would be best to 1) uninstall Linus Security64 and all SELinux packages and 2) retry the installation.

    Our installer simply checks whether it can find SELinux commands and if so, it then attempts to configure it; but if the SELinux is uninstalled then the installation should work fine.

    You can consider to remove the package that provides the "semodule" command (e.g. policycoreutils), or alternatively just rename the "/usr/sbin/semodule" binary to something else (eg. /usr/sbin/semodule22) if it is not to be used. After this, you can try the Linux Security 64 installation again.

    Please do not hesitate to contact us if you have any further questions!

    Thanks

    Sethu

  • Daniel_CDT
    Daniel_CDT Posts: 4 Security Scout

    @Sethu Laks

    Thank you for the pointers. Indeed Selinux is the culprit here, or well, kinda. Looks like your installer checks the existance of the folder /etc/selinux and then assumes selinux is installed. But for this machine, and I guess many other debian installs, this is not the case. The folder /etc/selinux is indeed there and has only one conf file:

    # ls -la /etc/selinux
    
total 20
    
drwxr-xr-x   2 root root  4096 Dec 18  2021 .
    
drwxr-xr-x 100 root root 12288 May  2 14:45 ..
    
-rw-r--r--   1 root root  2041 Dec 30  2016 semanage.conf

    semanage.conf is owned by the package libsemanage-common. Due to dependencies it is a very bad idea to uninstall that package:

    # apt remove libsemanage-common
Reading package lists... Done
    
Building dependency tree... Done
    
Reading state information... Done
    
The following packages were automatically installed and are no longer required:
    
adwaita-icon-theme at-spi2-core attr build-essential cpp cpp-10 dpkg-dev fakeroot fontconfig fontconfig-config fonts-dejavu-core g++ g++-10
    
gcc gcc-10 git git-man glib-networking-common glib-networking-services gnupg-l10n gnupg-utils gpg-wks-server gtk-update-icon-cache
    
hicolor-icon-theme iso-codes klibc-utils libalgorithm-diff-perl libalgorithm-diff-xs-perl libalgorithm-merge-perl libappstream4 libapt-pkg6.0
    
libargon2-1 libasan6 libatk-bridge2.0-0 libatk1.0-0 libatk1.0-data libatomic1 libatspi2.0-0 libauthen-sasl-perl libboost-iostreams1.74.0
    
libboost-thread1.74.0 libc-dev-bin libc-devtools libc6-dev libcairo-gobject2 libcairo2 libcbor0 libcc1-0 libclamav9 libclone-perl libcolord2
    
libcrypt-dev libcryptsetup12 libcurl3-gnutls libdata-dump-perl libdatrie1 libdconf1 libdeflate0 libdpkg-perl libdrm-amdgpu1 libdrm-intel1
    
libdrm-nouveau2 libdrm-radeon1 libdw1 libencode-locale-perl libepoxy0 liberror-perl libevent-2.1-7 libfakeroot libfido2-1 libfile-basedir-perl
    
libfile-desktopentry-perl libfile-fcntllock-perl libfile-listing-perl libfile-mimeinfo-perl libfont-afm-perl libfontconfig1 libfontenc1
    
libgcc-10-dev libgd3 libgdk-pixbuf-2.0-0 libgdk-pixbuf2.0-bin libgdk-pixbuf2.0-common libgfapi0 libgfrpc0 libgfxdr0 libgl1 libgl1-mesa-dri
    
libglapi-mesa libglib2.0-bin libglusterfs0 libglvnd0 libglx-mesa0 libglx0 libgomp1 libgraphite2-3 libgstreamer1.0-0 libharfbuzz0b
    
libhtml-form-perl libhtml-format-perl libhtml-parser-perl libhtml-tagset-perl libhtml-tree-perl libhttp-cookies-perl libhttp-daemon-perl
    
libhttp-date-perl libhttp-message-perl libhttp-negotiate-perl libice6 libio-html-perl libio-socket-ssl-perl libio-stringy-perl
    
libipc-system-simple-perl libisl23 libitm1 libjbig0 libjpeg62-turbo libjson-glib-1.0-0 libjson-glib-1.0-common libklibc liblcms2-2 libllvm11
    
liblsan0 liblwp-mediatypes-perl liblwp-protocol-https-perl libmailtools-perl libmpc3 libmpfr6 libnet-dbus-perl libnet-http-perl
    
libnet-smtp-ssl-perl libnet-ssleay-perl libnfsidmap2 libnl-route-3-200 libnsl-dev libnspr4 libnss3 libpackagekit-glib2-18 libpango-1.0-0
    
libpangocairo-1.0-0 libpangoft2-1.0-0 libpciaccess0 libpixman-1-0 libpolkit-agent-1-0 libpolkit-gobject-1-0 libproxy1v5 libquadmath0
    
librsvg2-2 librsvg2-common libsensors-config libsensors5 libsm6 libstdc++-10-dev libstemmer0d libtfm1 libthai-data libthai0 libtie-ixhash-perl
    
libtiff5 libtimedate-perl libtirpc-dev libtry-tiny-perl libtsan0 libubsan1 libunwind8 liburi-perl liburing1 libvte-2.91-common libvulkan1
    
libwayland-client0 libwayland-cursor0 libwayland-egl1 libwebp6 libwrap0 libwww-perl libwww-robotrules-perl libx11-6 libx11-data
    
libx11-protocol-perl libx11-xcb1 libxau6 libxaw7 libxcb-dri2-0 libxcb-dri3-0 libxcb-glx0 libxcb-present0 libxcb-randr0 libxcb-render0
    
libxcb-shape0 libxcb-shm0 libxcb-sync1 libxcb-xfixes0 libxcb1 libxcomposite1 libxcursor1 libxdamage1 libxdmcp6 libxext6 libxfixes3 libxft2
    
libxi6 libxinerama1 libxkbcommon0 libxkbfile1 libxml-parser-perl libxml-twig-perl libxml-xpathengine-perl libxmu6 libxmuu1 libxpm4 libxrandr2
    
libxrender1 libxshmfence1 libxt6 libxtst6 libxv1 libxxf86dga1 libxxf86vm1 libxxhash0 libz3-4 linux-base linux-libc-dev manpages-de
    
manpages-dev mesa-vulkan-drivers patch perl-openssl-defaults python-apt-common python3-apt python3-debconf python3-debian python3-debianbts
    
python3-httplib2 python3-pycurl python3-pysimplesoap rsync runit-helper samba-vfs-modules tdb-tools x11-common x11-utils x11-xserver-utils
    
xauth xdg-utils
    
Use 'apt autoremove' to remove them.
    
The following additional packages will be installed:
    
anacron initscripts insserv startpar sysv-rc
    
Suggested packages:
    
default-mta | mail-transport-agent bootchart2
    
Recommended packages:
    
cron | cron-daemon
    
The following packages will be REMOVED:
    
adduser apt apt-listchanges apt-transport-https apt-utils clamav clamav-base clamav-freshclam clamav-unofficial-sigs cron dbus
    
dbus-user-session dconf-gsettings-backend dconf-service dirmngr fuse glib-networking gnupg gpg-wks-client gsettings-desktop-schemas
    
ibverbs-providers ifupdown init initramfs-tools initramfs-tools-core libcephfs2 libgtk-3-0 libgtk-3-bin libgtk-3-common libibverbs1
    
libnss-systemd libpam-systemd librados2 librdmacm1 librest-0.7-0 libsemanage-common libsemanage1 libsoup-gnome2.4-1 libsoup2.4-1 libvte-2.91-0
    
linux-image-5.10.0-20-amd64 linux-image-5.10.0-21-amd64 linux-image-amd64 nfs-common openssh-client openssh-server openssh-sftp-server
    
packagekit packagekit-tools passwd policykit-1 postfix postfix-pcre postfix-sqlite python3-reportbug reportbug rpcbind samba ssl-cert systemd
    
systemd-sysv systemd-timesyncd task-german task-ssh-server tasksel tasksel-data tcpdump termit udev
    
The following NEW packages will be installed:
    
anacron initscripts insserv startpar sysv-rc
    
WARNING: The following essential packages will be removed.
    
This should NOT be done unless you know exactly what you are doing!
    
apt adduser (due to apt) init systemd-sysv (due to init)
    
0 upgraded, 5 newly installed, 69 to remove and 0 not upgraded.
    
Need to get 221 kB of archives.
    
After this operation, 773 MB disk space will be freed.
    
You are about to do something potentially harmful.
    
To continue type in the phrase 'Yes, do as I say!'

    Renaming the folder /etc/selinux to something different ( e.g. /etc/selinuz), installing f-secure av and renaming it back worked. But I guess installing updates will make trouble. Please fix your installer. Just checking a directory is really bad practice. To be honest, I'm disappointed. You really should know better.

  • Sethu Laks
    Sethu Laks Staff, Moderator Posts: 288 W/ Moderator

    Hi @Daniel_CDT

    Thank you for taking the time to give us your feedback, and we apologize for any disappointment that may have caused. I will definitely make sure our R&D team is aware of your insightful findings.

    Thanks

    Sethu

This discussion has been closed.

Categories