F-Secure Linux Security 11 / Problem on Debian 8.0 8.1 8.2 since 23 Jan 2016

niepce

Hi,

 

Installation procedure for FSLS11 on Debian 8.x was working without issue until 23rd January 2016 when Debian 8.3 was released.

 

On Debian 8.0/8.1 64bit when fetching the dependancies :

apt-get install rpm libstdc++6:i386 libpam-modules:i386 zlib1g:i386

 

Got immediate error (on ALL Debian machines).

dpkg: erreur de traitement de l'archive /var/cache/apt/archives/libpam-modules_1.1.8-3.1+deb8u1_i386.deb (--unpack) :

tentative de remplacement de « /usr/share/man/man8/pam_unix.8.gz », qui est différent d'autres instances du paquet libpam-modules:i386

dpkg-deb : erreur : le sous-processus coller a été tué par le signal (Relais brisé (pipe))

Traitement des actions différées (« triggers ») pour man-db (2.7.0.2-5) ...

Des erreurs ont été rencontrées pendant l'exécution :

/var/cache/apt/archives/libpam-modules_1.1.8-3.1+deb8u1_i386.deb

E: Sub-process /usr/bin/dpkg returned an error code (1)

 

Looks like it tries to fetch the 8.3 package or something.

 

Could you update the Pre installation checklist for Debian 8.x 64bit

I haven't tried 32 bit yet.

 

Thanks !

 

Ben

Hi Niepce,

 

Could you please open a support ticket so that we can have a better look at the issue?

Make sure to include an fsdiag and the reference to this thread.

 

Note that only debian 8.0 snd 8.1 are currently supported on 64bits with the following restriction in the release notes.

"The on-access scanning is not supported on Debian 8 because the kernel configuration has fanotify disabled by default."

 

niepce

Ben,

Long story short, the procedure here after, as is,  is no longer valid for Debian 8.x environments :

https://community.f-secure.com/t5/Business/Pre-installation-checklist-for-F/ta-p/76128

 

This is not related to fanotify on file access but rather to the list of prerequisites packages for FSLS installation.

 

This following step must be changed to something else :

• Install following packages:
  rpm libstdc++6:i386 libpam-modules:i386 zlib1g:i386

 

 

Debian 8.0 or 8.1 won't allow to install  at least libpam-modules:i386, the apt-get install will fail.

It is a general issue, we replicated the problem at least on 3 Debians for which the Pre-Installation Checklist was working before 23 Jan 2016.

 

I will provide a ticket to support.