Error installing F-Secure Linux Security 64 on Debian 11

Daniel_CDT · 2023-04-27T13:10:35+00:00

There was an error rendering this rich post.

I get the following error message when installing F-Secure Linux Security 64 on Debian 11 according to the manual:

Selecting previously unselected package f-secure-linuxsecurity.
(Reading database ... 66812 files and directories currently installed.)
Preparing to unpack .../f-secure-linuxsecurity.deb ...
Unpacking f-secure-linuxsecurity (12.0.50-1) ...
Setting up f-secure-linuxsecurity (12.0.50-1) ...

Installing WithSecure Linux Security 64
2023-04-27 14:58:16 src/verifymanifest.c:127[6] DAAS2 manifest verification failed, error 5
2023-04-27 14:58:16 src/fsbootstrap.c:221[7] DAAS2 signature verification failed
setup: failed to install FSBG: exit status 2
2023-04-27 14:58:16 src/fsbootstrap.c:466[7] executing '/opt/f-secure/linuxsecurity/download/linuxsecurity-1200-linux-x86_64/1682421514/content/setup' failed, result 256
2023-04-27 14:58:16 src/fsbootstrap.c:228[7] install failed
activate: activation failed: exit status 2
Failed to activate the product!

What does that message mean?

Find more posts tagged with

Accepted answers

All comments

Sethu Laks

Hi @Daniel_CDT

Thank you for taking the time to give us your feedback, and we apologize for any disappointment that may have caused. I will definitely make sure our R&D team is aware of your insightful findings.

Thanks

Sethu

Daniel_CDT

@Sethu Laks

Thank you for the pointers. Indeed Selinux is the culprit here, or well, kinda. Looks like your installer checks the existance of the folder /etc/selinux and then assumes selinux is installed. But for this machine, and I guess many other debian installs, this is not the case. The folder /etc/selinux is indeed there and has only one conf file:

# ls -la /etc/selinux

total 20

drwxr-xr-x   2 root root  4096 Dec 18  2021 .

drwxr-xr-x 100 root root 12288 May  2 14:45 ..

-rw-r--r--   1 root root  2041 Dec 30  2016 semanage.conf

semanage.conf is owned by the package libsemanage-common. Due to dependencies it is a very bad idea to uninstall that package:

# apt remove libsemanage-common
Reading package lists... Done

Building dependency tree... Done

Reading state information... Done

The following packages were automatically installed and are no longer required:

adwaita-icon-theme at-spi2-core attr build-essential cpp cpp-10 dpkg-dev fakeroot fontconfig fontconfig-config fonts-dejavu-core g++ g++-10

gcc gcc-10 git git-man glib-networking-common glib-networking-services gnupg-l10n gnupg-utils gpg-wks-server gtk-update-icon-cache

hicolor-icon-theme iso-codes klibc-utils libalgorithm-diff-perl libalgorithm-diff-xs-perl libalgorithm-merge-perl libappstream4 libapt-pkg6.0

libargon2-1 libasan6 libatk-bridge2.0-0 libatk1.0-0 libatk1.0-data libatomic1 libatspi2.0-0 libauthen-sasl-perl libboost-iostreams1.74.0

libboost-thread1.74.0 libc-dev-bin libc-devtools libc6-dev libcairo-gobject2 libcairo2 libcbor0 libcc1-0 libclamav9 libclone-perl libcolord2

libcrypt-dev libcryptsetup12 libcurl3-gnutls libdata-dump-perl libdatrie1 libdconf1 libdeflate0 libdpkg-perl libdrm-amdgpu1 libdrm-intel1

libdrm-nouveau2 libdrm-radeon1 libdw1 libencode-locale-perl libepoxy0 liberror-perl libevent-2.1-7 libfakeroot libfido2-1 libfile-basedir-perl

libfile-desktopentry-perl libfile-fcntllock-perl libfile-listing-perl libfile-mimeinfo-perl libfont-afm-perl libfontconfig1 libfontenc1

libgcc-10-dev libgd3 libgdk-pixbuf-2.0-0 libgdk-pixbuf2.0-bin libgdk-pixbuf2.0-common libgfapi0 libgfrpc0 libgfxdr0 libgl1 libgl1-mesa-dri

libglapi-mesa libglib2.0-bin libglusterfs0 libglvnd0 libglx-mesa0 libglx0 libgomp1 libgraphite2-3 libgstreamer1.0-0 libharfbuzz0b

libhtml-form-perl libhtml-format-perl libhtml-parser-perl libhtml-tagset-perl libhtml-tree-perl libhttp-cookies-perl libhttp-daemon-perl

libhttp-date-perl libhttp-message-perl libhttp-negotiate-perl libice6 libio-html-perl libio-socket-ssl-perl libio-stringy-perl

libipc-system-simple-perl libisl23 libitm1 libjbig0 libjpeg62-turbo libjson-glib-1.0-0 libjson-glib-1.0-common libklibc liblcms2-2 libllvm11

liblsan0 liblwp-mediatypes-perl liblwp-protocol-https-perl libmailtools-perl libmpc3 libmpfr6 libnet-dbus-perl libnet-http-perl

libnet-smtp-ssl-perl libnet-ssleay-perl libnfsidmap2 libnl-route-3-200 libnsl-dev libnspr4 libnss3 libpackagekit-glib2-18 libpango-1.0-0

libpangocairo-1.0-0 libpangoft2-1.0-0 libpciaccess0 libpixman-1-0 libpolkit-agent-1-0 libpolkit-gobject-1-0 libproxy1v5 libquadmath0

librsvg2-2 librsvg2-common libsensors-config libsensors5 libsm6 libstdc++-10-dev libstemmer0d libtfm1 libthai-data libthai0 libtie-ixhash-perl

libtiff5 libtimedate-perl libtirpc-dev libtry-tiny-perl libtsan0 libubsan1 libunwind8 liburi-perl liburing1 libvte-2.91-common libvulkan1

libwayland-client0 libwayland-cursor0 libwayland-egl1 libwebp6 libwrap0 libwww-perl libwww-robotrules-perl libx11-6 libx11-data

libx11-protocol-perl libx11-xcb1 libxau6 libxaw7 libxcb-dri2-0 libxcb-dri3-0 libxcb-glx0 libxcb-present0 libxcb-randr0 libxcb-render0

libxcb-shape0 libxcb-shm0 libxcb-sync1 libxcb-xfixes0 libxcb1 libxcomposite1 libxcursor1 libxdamage1 libxdmcp6 libxext6 libxfixes3 libxft2

libxi6 libxinerama1 libxkbcommon0 libxkbfile1 libxml-parser-perl libxml-twig-perl libxml-xpathengine-perl libxmu6 libxmuu1 libxpm4 libxrandr2

libxrender1 libxshmfence1 libxt6 libxtst6 libxv1 libxxf86dga1 libxxf86vm1 libxxhash0 libz3-4 linux-base linux-libc-dev manpages-de

manpages-dev mesa-vulkan-drivers patch perl-openssl-defaults python-apt-common python3-apt python3-debconf python3-debian python3-debianbts

python3-httplib2 python3-pycurl python3-pysimplesoap rsync runit-helper samba-vfs-modules tdb-tools x11-common x11-utils x11-xserver-utils

xauth xdg-utils

Use 'apt autoremove' to remove them.

The following additional packages will be installed:

anacron initscripts insserv startpar sysv-rc

Suggested packages:

default-mta | mail-transport-agent bootchart2

Recommended packages:

cron | cron-daemon

The following packages will be REMOVED:

adduser apt apt-listchanges apt-transport-https apt-utils clamav clamav-base clamav-freshclam clamav-unofficial-sigs cron dbus

dbus-user-session dconf-gsettings-backend dconf-service dirmngr fuse glib-networking gnupg gpg-wks-client gsettings-desktop-schemas

ibverbs-providers ifupdown init initramfs-tools initramfs-tools-core libcephfs2 libgtk-3-0 libgtk-3-bin libgtk-3-common libibverbs1

libnss-systemd libpam-systemd librados2 librdmacm1 librest-0.7-0 libsemanage-common libsemanage1 libsoup-gnome2.4-1 libsoup2.4-1 libvte-2.91-0

linux-image-5.10.0-20-amd64 linux-image-5.10.0-21-amd64 linux-image-amd64 nfs-common openssh-client openssh-server openssh-sftp-server

packagekit packagekit-tools passwd policykit-1 postfix postfix-pcre postfix-sqlite python3-reportbug reportbug rpcbind samba ssl-cert systemd

systemd-sysv systemd-timesyncd task-german task-ssh-server tasksel tasksel-data tcpdump termit udev

The following NEW packages will be installed:

anacron initscripts insserv startpar sysv-rc

WARNING: The following essential packages will be removed.

This should NOT be done unless you know exactly what you are doing!

apt adduser (due to apt) init systemd-sysv (due to init)

0 upgraded, 5 newly installed, 69 to remove and 0 not upgraded.

Need to get 221 kB of archives.

After this operation, 773 MB disk space will be freed.

You are about to do something potentially harmful.

To continue type in the phrase 'Yes, do as I say!'

Renaming the folder /etc/selinux to something different ( e.g. /etc/selinuz), installing f-secure av and renaming it back worked. But I guess installing updates will make trouble. Please fix your installer. Just checking a directory is really bad practice. To be honest, I'm disappointed. You really should know better.

Sethu Laks

Hi @Daniel_CDT

Thank you for reaching out to WithSecure Community!

According to your error message above, we've received similar cases from other customers in the past. This may be caused by the absence of "SELINUXTYPE=targeted" in the configuration.

Note that SELINUX can be any value, but SELINUXTYPE must be set to "targeted".

Reinstallation is required after fixing the value.

Uninstall Linux Security 64
Remove Linux Security folders (rm -rf /opt/f-secure /etc/opt/f-secure /var/opt/f-secure)
Add SELINUXTYPE=targeted to the config file /etc/selinux/config
Reboot system (recommended)
Install Linux Security 64

In case, SELinux is not used at all, but only the SELinux software is installed? It would be best to 1) uninstall Linus Security64 and all SELinux packages and 2) retry the installation.

Our installer simply checks whether it can find SELinux commands and if so, it then attempts to configure it; but if the SELinux is uninstalled then the installation should work fine.

You can consider to remove the package that provides the "semodule" command (e.g. policycoreutils), or alternatively just rename the "/usr/sbin/semodule" binary to something else (eg. /usr/sbin/semodule22) if it is not to be used. After this, you can try the Linux Security 64 installation again.

Please do not hesitate to contact us if you have any further questions!

Thanks

Sethu