{ "product_webhelp-latest-en.json": { "title": "title_product_webhelp_000001_6F98FAF", "title_product_webhelp_000001_6F98FAF": "Linux Protection ", "shortdesc": "shortdesc_product_webhelp_000003_2186E68", "shortdesc_product_webhelp_000003_2186E68": "This documentation provides instructions and information on using the product. ", "content.p_product_webhelp_000008_D9930A8": "Download the Linux Protection administrator's guide (PDF).", "content.dt_product_webhelp_00000C_0FDA7FB": "Installation packages", "content.dd_product_webhelp_00000D_435D3C9": "You can find the installation packages for the product in the Management portal under Downloads.", "desc": [ "content.p_product_webhelp_000008_D9930A8", { "dl.dl_product_webhelp_00000A_F15E680": [ { "dlentry.dlentry_product_webhelp_00000B_ADDE9AE": [ "content.dt_product_webhelp_00000C_0FDA7FB", "content.dd_product_webhelp_00000D_435D3C9" ] } ] } ] }, "welcome-latest-en.json": { "title": "title_welcome_000001_88AB559C", "title_welcome_000001_88AB559C": "Introduction ", "shortdesc": "shortdesc_welcome_000002_2B4808CA", "shortdesc_welcome_000002_2B4808CA": "This product provides an integrated, out-of-the-box security solution with strong real-time protection against viruses and potentially unwanted applications, and it also includes host intrusion prevention (HIPS) functionality that provides protection against unauthorized system modifications, as well as userspace and kernel rootkits. ", "content.p_welcome_00000C_E8067B48": "Computer viruses are one of the most harmful threats to the security of data on computers. While some viruses are harmless pranks, other viruses can destroy data and pose a real threat.", "content.p_welcome_00000D_D0D1DF3E": "The solution can be deployed and managed using the WithSecure Elements Endpoint Protection portal. It is also possible to run Linux Protection without a connection to the management portal, in which case you can use command line tools to manage the product settings.", "desc": [ "content.p_welcome_00000C_E8067B48", "content.p_welcome_00000D_D0D1DF3E" ] }, "sys_reqs-latest-en.json": { "title": "title_sys_reqs_000001_6D9CD6D5", "title_sys_reqs_000001_6D9CD6D5": "System requirements", "shortdesc": "shortdesc_sys_reqs_000002_D76E2344", "shortdesc_sys_reqs_000002_D76E2344": "This section contains important information about the product. ", "content.p_sys_reqs_00000B_376A1B76": "We strongly recommend that you read the entire document before you start using the product.", "content.dt_sys_reqs_00000E_9BE66847": "Supported platforms", "content.dd_sys_reqs_00000F_2715FDE1": "", "content.note_sys_reqs_000010_6F8B834F": "Note: WithSecure supports only operating systems that are currently supported by their vendor. Learn more about WithSecure’s operating system support policies at Product updates and supported versions. If you are interested in long-term support for a platform that vendors no longer support, contact your sales representative.
", "content.dd_p_sys_reqs_000013_CD6EC7B0": "The following 64-bit (AMD64/EM64T) distributions are supported:
", "choice.choice_sys_reqs_000015_203EB853": "AlmaLinux 8, 9, 10", "choice.choice_sys_reqs_000016_C36BF0EF": "Amazon Linux 2, 2023", "choice.choice_sys_reqs_000017_8C121C49": "Debian 11, 12, 13", "choice.choice_sys_reqs_000018_8B075A74": "Oracle Linux 8, 9, 10", "choice.choice_sys_reqs_000019_23C2844F": "RHEL 8, 9, 10", "choice.choice_sys_reqs_00001A_BC4AF45D": "Rocky Linux 8, 9, 10", "choice.choice_sys_reqs_00001B_A0977652": "SUSE Linux Enterprise Server 15 (Service Pack 6)", "choice.choice_sys_reqs_00001C_3C0C3130": "Ubuntu 20.04, 22.04, 24.04", "content.dd_p_sys_reqs_00001D_2F1C2025": "The following 64-bit (ARMv8/AArch64) distributions are supported:
", "choice.choice_sys_reqs_00001F_97AFB247": "AlmaLinux 9, 10", "choice.choice_sys_reqs_000021_F95F1A0B": "Amazon Linux 2023", "choice.choice_sys_reqs_000023_E650ACC8": "Debian 11, 12, 13", "choice.choice_sys_reqs_000025_08CA5AE8": "Oracle Linux 9, 10", "choice.choice_sys_reqs_000027_09028992": "Red Hat Enterprise Linux 9, 10", "choice.choice_sys_reqs_000029_63C0752B": "Rocky 9, 10", "choice.choice_sys_reqs_00002B_1584107B": "Ubuntu 22.04, 24.04", "content.note_sys_reqs_00002D_C898CD4C": "Note: All operating systems must have TLS 1.2 configured and enabled.
", "content.p_sys_reqs_00004A_59D50F48": "", "content.dt_sys_reqs_00002F_2745546C": "Support for SELinux", "content.dd_sys_reqs_000030_0CE7ADFF": "", "content.dd_p_sys_reqs_000031_E95CBB94": "The product supports Security-Enhanced Linux with the following distributions:
", "choice.choice_sys_reqs_000033_A9B1F28C": "AlmaLinux 8, 9, 10 *", "choice.choice_sys_reqs_000035_0F8CA9B6": "Debian 11, 12, 13 **", "choice.choice_sys_reqs_000037_0FC33750": "Oracle Linux 8, 9, 10 *", "choice.choice_sys_reqs_000039_DF39C4AC": "RHEL 8, 9, 10 *", "choice.choice_sys_reqs_00003B_C56F45C3": "Rocky Linux 8, 9, 10 *", "content.dd_p_sys_reqs_00003D_74AFB058": "* on systems running the \"targeted\" SELinux system policy
", "content.dd_p_sys_reqs_00003E_0DDDB701": "** the product is compatible with the \"default\" SELinux system policy
", "content.dd_p_sys_reqs_00003F_1E706AFC": "If the distribution is not supported, SELinux must be disabled.
", "content.note_sys_reqs_000040_FA18CA44": "Note: Major distribution upgrades when the product is installed on a host with SELinux enabled policies are not supported. We recommend uninstalling the product before upgrading the distribution and then reinstalling it on the upgraded system.
", "content.dt_sys_reqs_000042_A25CE7B2": "System requirements", "content.dd_sys_reqs_000043_81421F21": "", "choice.choice_sys_reqs_000045_437891F0": "Processor: 64-bit processor compatible with the distribution; two or more cores recommended", "choice.choice_sys_reqs_000046_8C8C6EE1": "Memory: 4 GB RAM", "choice.choice_sys_reqs_000047_8198F45C": "Disk space: At least 2 GB available (recommended)", "choice.choice_sys_reqs_000048_C85899C1": "Swap: Sufficient swap memory is highly recommended", "choice.choice_sys_reqs_000049_B9601BB0": "Internet connection: Required to validate your subscription, receive product updates, and use cloud-based detection", "desc": [ "content.p_sys_reqs_00000B_376A1B76", { "dl.dl_sys_reqs_00000C_160EA49F": [ { "dlentry.dlentry_sys_reqs_00000D_51C7453D": [ "content.dt_sys_reqs_00000E_9BE66847", "content.dd_sys_reqs_00000F_2715FDE1", "content.note_sys_reqs_000010_6F8B834F", "content.dd_p_sys_reqs_000013_CD6EC7B0", { "choices.ul_sys_reqs_000014_7F27112B": [ "choice.choice_sys_reqs_000015_203EB853", "choice.choice_sys_reqs_000016_C36BF0EF", "choice.choice_sys_reqs_000017_8C121C49", "choice.choice_sys_reqs_000018_8B075A74", "choice.choice_sys_reqs_000019_23C2844F", "choice.choice_sys_reqs_00001A_BC4AF45D", "choice.choice_sys_reqs_00001B_A0977652", "choice.choice_sys_reqs_00001C_3C0C3130" ] }, "content.dd_p_sys_reqs_00001D_2F1C2025", { "choices.ul_sys_reqs_00001E_59F37669": [ "choice.choice_sys_reqs_00001F_97AFB247", "choice.choice_sys_reqs_000021_F95F1A0B", "choice.choice_sys_reqs_000023_E650ACC8", "choice.choice_sys_reqs_000025_08CA5AE8", "choice.choice_sys_reqs_000027_09028992", "choice.choice_sys_reqs_000029_63C0752B", "choice.choice_sys_reqs_00002B_1584107B" ] }, "content.note_sys_reqs_00002D_C898CD4C", "content.p_sys_reqs_00004A_59D50F48" ] }, { "dlentry.dlentry_sys_reqs_00002E_CFFD751D": [ "content.dt_sys_reqs_00002F_2745546C", "content.dd_sys_reqs_000030_0CE7ADFF", "content.dd_p_sys_reqs_000031_E95CBB94", { "choices.ul_sys_reqs_000032_F04548FE": [ "choice.choice_sys_reqs_000033_A9B1F28C", "choice.choice_sys_reqs_000035_0F8CA9B6", "choice.choice_sys_reqs_000037_0FC33750", "choice.choice_sys_reqs_000039_DF39C4AC", "choice.choice_sys_reqs_00003B_C56F45C3" ] }, "content.dd_p_sys_reqs_00003D_74AFB058", "content.dd_p_sys_reqs_00003E_0DDDB701", "content.dd_p_sys_reqs_00003F_1E706AFC", "content.note_sys_reqs_000040_FA18CA44" ] }, { "dlentry.dlentry_sys_reqs_000041_88A1D8A2": [ "content.dt_sys_reqs_000042_A25CE7B2", "content.dd_sys_reqs_000043_81421F21", { "choices.ul_sys_reqs_000044_784A558B": [ "choice.choice_sys_reqs_000045_437891F0", "choice.choice_sys_reqs_000046_8C8C6EE1", "choice.choice_sys_reqs_000047_8198F45C", "choice.choice_sys_reqs_000048_C85899C1", "choice.choice_sys_reqs_000049_B9601BB0" ] } ] } ] } ] }, "how_product_works-latest-en.json": { "title": "title_how_product_works_000001_8A14B", "title_how_product_works_000001_8A14B": "How the product works ", "shortdesc": "shortdesc_how_product_works_000002_4A052", "shortdesc_how_product_works_000002_4A052": "The product detects and prevents intrusions and protects against malware. ", "content.p_how_product_works_00000B_82572": "When user downloads a file from the Internet, for example by clicking a link in an email message, the file is scanned when the user tries to open it. If the file is infected, the product protects the system against the malware.", "step.step_how_product_works_00000D_A22A2": "Real-time scanning gives you continuous protection against viruses and potentially unwanted applications as files are opened, copied, and downloaded from the Web. Real-time scanning functions transparently in the background, looking for viruses whenever you access files on the hard disk, removable media, or network drives. If you try to access an infected file, the real-time protection automatically stops the virus from executing.", "step.step_how_product_works_000010_D34D3": "When the real-time scanning has been configured to scan a limited set of files, the manual scanning can be used to scan the full system or you can use the scheduled scanning to scan the full system at regular intervals.", "step.step_how_product_works_000013_6A265": "Automatic Updates keep the virus definitions always up-to-date. The virus definition databases are updated automatically after the product has been installed. The virus definitions updates are signed by WithSecure.", "content.p_how_product_works_000016_F7496": "The Host Intrusion Prevention System (HIPS) detects any malicious activity on the host, protecting the system on many levels.", "content.p_how_product_works_00001C_8BE5A": "You can create a baseline of the system files that you want to protect and prevent the use of any modified files for all users.", "step.step_how_product_works_000019_05181": "Integrity Checking protects the system against unauthorized modifications. It is based on the concept of a known good configuration - the product should be installed before the computer is connected to the network to guarantee that the system is in a known good configuration.", "step.step_how_product_works_00001D_4C28E": "If an attacker gains a shell access to the system and tries to add a user account to login to the system later, Host Intrusion Prevention System (HIPS) detects modified system files and alerts the administrator.", "step.step_how_product_works_000020_6B444": "If an attacker has gained an access to the system and tries to install a userspace rootkit by replacing various system utilities, HIPS detects modified system files and alerts the administrator.", "desc": [ "content.p_how_product_works_00000B_82572", { "steps.ul_how_product_works_00000C_DF178": [ "step.step_how_product_works_00000D_A22A2", "step.step_how_product_works_000010_D34D3", "step.step_how_product_works_000013_6A265" ] }, "content.p_how_product_works_000016_F7496", { "steps.ul_how_product_works_000018_6FC83": [ "step.step_how_product_works_000019_05181", "content.p_how_product_works_00001C_8BE5A", "step.step_how_product_works_00001D_4C28E", "step.step_how_product_works_000020_6B444" ] } ] }, "features_and_benefits-latest-en.json": { "title": "title_features_and_benefits_000023FD", "title_features_and_benefits_000023FD": "Key features and benefits ", "shortdesc": "shortdesc_features_and_benefits_0000C3C4", "shortdesc_features_and_benefits_0000C3C4": "The product offers superior protection against viruses and worms and is transparent to end-users. ", "content.p_features_and_benefits_0000CEA2": "The product scans files on a wide range of Linux-supported file systems.", "step.step_features_and_benefits_000060C5": "Scans files on any Linux-supported file system.", "step.step_features_and_benefits_0000E344": "Superior detection rate with multiple scanning engines.", "step.step_features_and_benefits_00005855": "A heuristic scanning engine can detect suspicious, potentially harmful files.", "step.step_features_and_benefits_00000B82": "The product can detect and categorize potentially unwanted applications.", "step.step_features_and_benefits_000021DA": "The product can be configured so that the users cannot bypass the protection.", "step.step_features_and_benefits_0000517D": "Files are scanned for viruses when they are opened or closed and before they are executed.", "step.step_features_and_benefits_0000DC05": "You can specify what files to scan, how to scan them, what action to take when malicious content is found and how to alert about the infections.", "step.step_features_and_benefits_0000F9B6": "Recursive scanning of archive files.", "step.step_features_and_benefits_0000AC8F": "Virus definition database updates are signed for security.", "content.p_features_and_benefits_000022BD": "The product works totally transparently to the end users.", "step.step_features_and_benefits_000014D9": "Virus definition databases are updated automatically without any need for end-user intervention.", "content.p_features_and_benefits_00009166": "Critical information of system files is stored and automatically checked before access is allowed.", "step.step_features_and_benefits_00000F0E": "The administrator can protect files against changes so that it is not possible to install, for example, a trojan version of a software.", "step.step_features_and_benefits_00008008": "An alert is sent to the administrator when a modified system file is found.", "content.p_features_and_benefits_00003AB6": "The default settings apply in most systems.", "step.step_features_and_benefits_0000A0B6": "Security policies are configured and distributed from one central location.", "content.p_features_and_benefits_000082B3": "The product has extensive monitoring and alerting functions that can be used to notify any administrator in the company network about any infected content that has been found.", "desc": [ "content.p_features_and_benefits_0000CEA2", { "steps.ul_features_and_benefits_00004766": [ "step.step_features_and_benefits_000060C5", "step.step_features_and_benefits_0000E344", "step.step_features_and_benefits_00005855", "step.step_features_and_benefits_00000B82", "step.step_features_and_benefits_000021DA", "step.step_features_and_benefits_0000517D", "step.step_features_and_benefits_0000DC05", "step.step_features_and_benefits_0000F9B6", "step.step_features_and_benefits_0000AC8F" ] }, "content.p_features_and_benefits_000022BD", { "steps.ul_features_and_benefits_00009ED3": [ "step.step_features_and_benefits_000014D9" ] }, "content.p_features_and_benefits_00009166", { "steps.ul_features_and_benefits_0000F6D5": [ "step.step_features_and_benefits_00000F0E", "step.step_features_and_benefits_00008008" ] }, "content.p_features_and_benefits_00003AB6", { "steps.ul_features_and_benefits_00003CF6": [ "step.step_features_and_benefits_0000A0B6" ] }, "content.p_features_and_benefits_000082B3" ] }, "what_is_harmful_content-latest-en.json": { "title": "title_what_is_harmful_content_00FA75", "title_what_is_harmful_content_00FA75": "What is harmful content", "shortdesc": "shortdesc_what_is_harmful_content_00202F", "shortdesc_what_is_harmful_content_00202F": "Harmful applications and files can try to damage your data or gain unauthorized access to your computer system to steal your private information. ", "content.p_what_is_harmful_content_003636": "This section describes common types of harmful content, including viruses, potentially unwanted applications, worms, trojans, backdoors, exploits, exploit kits, and rootkits. The following topics explain how each type can affect your computer or data.", "desc": [ "content.p_what_is_harmful_content_003636" ] }, "viruses-latest-en.json": { "title": "title_viruses_000001_F4E88979", "title_viruses_000001_F4E88979": "Viruses", "shortdesc": "shortdesc_viruses_000002_8744AFD8", "shortdesc_viruses_000002_8744AFD8": "A virus is usually a program that can attach itself to files and replicate itself repeatedly; it can alter and replace the contents of other files in a way that may damage the computer. ", "content.p_viruses_00000C_E536FF43": "A virus is a program that is normally installed on the computer without the user's knowledge. Once there, the virus tries to replicate itself. The virus:", "step.step_viruses_00000F_A7DEF71A": "uses some of the system resources", "step.step_viruses_000010_EF5100B8": "may alter or damage files on the computer", "step.step_viruses_000011_0D079CBC": "tries to use the computer to infect other computers", "step.step_viruses_000012_C762C492": "may allow the computer to be used for illegal purposes.", "desc": [ "content.p_viruses_00000C_E536FF43", { "steps.ul_viruses_00000E_83C8B5E0": [ "step.step_viruses_00000F_A7DEF71A", "step.step_viruses_000010_EF5100B8", "step.step_viruses_000011_0D079CBC", "step.step_viruses_000012_C762C492" ] } ] }, "potentially_unwanted-latest-en.json": { "title": "title_potentially_unwanted_000004BA5", "title_potentially_unwanted_000004BA5": "Potentially unwanted applications (PUA) and unwanted applications (UA)", "shortdesc": "shortdesc_potentially_unwanted_00000F918", "shortdesc_potentially_unwanted_00000F918": "'Potentially unwanted applications' have features that you may like or want. 'Unwanted applications' have features that can harm your device or data more seriously. ", "content.p_potentially_unwanted_000000F5E": "An application may be called an 'potentially unwanted' (PUA) if it:", "step.step_potentially_unwanted_00001A631": "Hurts your privacy or productivity - for example, exposes personal information or does things without your permission", "step.step_potentially_unwanted_0000135B2": "Uses too many of your device's resources - for example, takes up a lot of storage space or memory", "step.step_potentially_unwanted_00001FECD": "Makes your device or data less secure - for example, exposes you to unexpected content or other applications", "content.p_potentially_unwanted_00001D2F9": "The harm that these features can cause to your device or data can be from mild to serious. However, they are not dangerous enough to be called malware.", "content.p_potentially_unwanted_00001BE53": "If an application has features that cause serious harm, it is labeled as 'unwanted application' (UA). The product will treat such applications with more caution.", "content.p_potentially_unwanted_000016509": "The software will treat an application differently depending on whether it is a 'potentially unwanted' (PUA) or an 'unwanted application' (UA):", "step.step_potentially_unwanted_0000115BC": "A potentially unwanted application - The product stops the application from running. If you are sure that you trust the application, you can exclude it from scanning. To do this, you need to have administrative rights on the file to be excluded.", "step.step_potentially_unwanted_000011AFC": "An unwanted application - The product stops the application from running.", "desc": [ "content.p_potentially_unwanted_000000F5E", { "steps.ul_potentially_unwanted_00001AA08": [ "step.step_potentially_unwanted_00001A631", "step.step_potentially_unwanted_0000135B2", "step.step_potentially_unwanted_00001FECD" ] }, "content.p_potentially_unwanted_00001D2F9", "content.p_potentially_unwanted_00001BE53", "content.p_potentially_unwanted_000016509", { "steps.ul_potentially_unwanted_00001A992": [ "step.step_potentially_unwanted_0000115BC", "step.step_potentially_unwanted_000011AFC" ] } ] }, "worms-latest-en.json": { "title": "title_worms_000001_CFE8425E", "title_worms_000001_CFE8425E": "Worms", "shortdesc": "shortdesc_worms_000002_C796CA24", "shortdesc_worms_000002_C796CA24": "Worms are programs that send copies of themselves from one device to another over a network. Some worms also perform harmful actions on an affected device. ", "content.p_worms_00000C_2EC9302B": "Many worms are designed to appear attractive to a user. They may look like images, videos, applications or any other kind of useful program or file. The aim of the deception is to lure the user into installing the worm. Other worms are designed to be completely stealthy, as they exploit flaws in the device (or in programs installed on it) to install themselves without ever being noticed by the user.", "content.p_worms_00000D_43E21591": "Once installed, the worm uses the device's physical resources to create copies of itself, and then send those copies to any other devices it can reach over a network. If a large quantity of worm copies is being sent out, the device's performance may suffer. If many devices on a network are affected and sending out worm copies, the network itself may be disrupted. Some worms can also do more direct damage to an affected device, such as modifying files stored on it, installing other harmful applications or stealing data.", "content.p_worms_00000E_6F39A1C0": "Most worms only spread over one particular type of network. Some worms can spread over two or more types, though they are relatively rare. Usually, worms will try and spread over one of the following networks (though there are those that target less popular channels):", "step.step_worms_000010_586D2438": "Local networks", "step.step_worms_000011_48126244": "Email networks", "step.step_worms_000012_BAA307ED": "Social media sites", "step.step_worms_000013_A15E7D9D": "Peer-to-peer (P2P) connections", "step.step_worms_000014_88E11E11": "SMS or MMS messages", "desc": [ "content.p_worms_00000C_2EC9302B", "content.p_worms_00000D_43E21591", "content.p_worms_00000E_6F39A1C0", { "steps.ul_worms_00000F_DD2263A3": [ "step.step_worms_000010_586D2438", "step.step_worms_000011_48126244", "step.step_worms_000012_BAA307ED", "step.step_worms_000013_A15E7D9D", "step.step_worms_000014_88E11E11" ] } ] }, "trojans-latest-en.json": { "title": "title_trojans_000001_9643C867", "title_trojans_000001_9643C867": "Trojans", "shortdesc": "shortdesc_trojans_000002_0A20FA92", "shortdesc_trojans_000002_0A20FA92": "A trojan is a program that offers, or appears to offer, an attractive function or feature, but then quietly performs harmful actions in the background. ", "content.p_trojans_00000E_2271939D": "Named after the Trojan Horse of Greek legend, trojans are designed to appear attractive to a user. They may look like games, screensavers, application updates or any other kind of useful program or file. Some trojans will mimic or even outrightly copy popular or well-known programs to appear more trustworthy. The aim of the deception is to lure the user into installing the trojan.", "content.p_trojans_00000F_FC44EE53": "Once installed, trojans can also use 'decoys' to maintain the illusion that they are legitimate. For example, a trojan disguised as a screensaver application or a document file will display an image or a document. While the user is distracted by these decoys, the trojan can quietly perform other actions in the background.", "content.p_trojans_000010_62C43396": "Trojans will usually either make harmful changes to the device (such as deleting or encrypting files, or changing program settings) or steal confidential data stored on it. Trojans can be grouped by the actions they perform:", "step.step_trojans_000012_B6ED8258": "Trojan-downloader: connects to a remote site to download and install other programs", "step.step_trojans_000014_DF0E23AC": "Trojan-dropper: contains one or more additional programs, which it installs", "subchoice.choice_trojans_000019_E0B644CF": "Banking-trojan: A specialized trojan-pws that specifically looks for usernames and passwords for online banking portals", "step.step_trojans_000016_431C3433": "Trojan-pws: Steals passwords stored on the device or entered into a web browser", "step.step_trojans_00001B_26D110EB": "Trojan-spy: Monitors activity on the device and forwards the details to a remote site", "desc": [ "content.p_trojans_00000E_2271939D", "content.p_trojans_00000F_FC44EE53", "content.p_trojans_000010_62C43396", { "steps.ul_trojans_000011_8EFAC88E": [ "step.step_trojans_000012_B6ED8258", "step.step_trojans_000014_DF0E23AC", "step.step_trojans_000016_431C3433", { "subchoices.ul_trojans_000018_7B79DA2D": [ "subchoice.choice_trojans_000019_E0B644CF" ] }, "step.step_trojans_00001B_26D110EB" ] } ] }, "backdoors-latest-en.json": { "title": "title_backdoors_000001_EFA2BF59", "title_backdoors_000001_EFA2BF59": "Backdoors", "shortdesc": "shortdesc_backdoors_000002_C9B3637E", "shortdesc_backdoors_000002_C9B3637E": "Backdoors are features or specially made software that let someone bypass the security of a specific program, device, website, or service. Usually, they are used by attackers to get into a system or do something harmful without permission. ", "content.p_backdoors_00000B_5382F24E": "A feature in a program, device, website, or service can be considered a backdoor if its design or implementation introduces a security risk. For example, a hidden way for an administrator to access a website that always works with the same password could be considered a backdoor.", "content.p_backdoors_00000C_E49046DE": "Backdoor software takes advantage of weaknesses in the code of a targeted program, device, website, or service. These weaknesses could be mistakes in the code, vulnerabilities, or hidden features that are not meant to be used.", "content.p_backdoors_00000D_4969CB2E": "Backdoors are usually used by attackers to get into a system without permission or to do something harmful while getting around security features such as limits on who can access files or devices, and to bypass authentication and encryption.", "desc": [ "content.p_backdoors_00000B_5382F24E", "content.p_backdoors_00000C_E49046DE", "content.p_backdoors_00000D_4969CB2E" ] }, "exploits-latest-en.json": { "title": "title_exploits_000001_ED1E8D39", "title_exploits_000001_ED1E8D39": "Exploits", "shortdesc": "shortdesc_exploits_000002_CF00C81D", "shortdesc_exploits_000002_CF00C81D": "Exploits are objects or ways of taking advantage of a flaw in a software to make it behave in a way that it was not meant. This makes it possible for an attacker to cause harm to your computer or device. ", "content.p_exploits_00000D_81A3AD70": "An exploit can be either an object or a method. For example, a specially made software, a piece of code, or a string of characters are all objects whereas a specific order of running commands is a method.", "content.p_exploits_00000E_9F0B4032": "An exploit can be used to take advantage of a flaw or weak spot (also known as a vulnerability) in a software. Because each software is different, each exploit has to be made specifically for that software.", "content.p_exploits_000010_CFE51764": "There are several ways an attacker can use an exploit to harm your computer or device:", "step.step_exploits_000012_21852EF5": "Embedding it inside a hacked or specially made software - when you install and launch the software, the exploit is launched", "step.step_exploits_000013_030A35F0": "Embedding it inside a document that is sent as an email attachment - when you open the attached document, the exploit is launched", "step.step_exploits_000014_D88F6EAD": "Hosting it on a hacked or harmful website - when you visit the website, the exploit is launched", "content.p_exploits_000015_9A002641": "Launching the exploit makes the software behave in a strange way, such as making it crash, or changing the system's storage or memory. This makes it possible for someone to harm your device and data, such as stealing your information or getting access to restricted sections of the operating system.", "desc": [ "content.p_exploits_00000D_81A3AD70", "content.p_exploits_00000E_9F0B4032", "content.p_exploits_000010_CFE51764", { "steps.ul_exploits_000011_A52AC342": [ "step.step_exploits_000012_21852EF5", "step.step_exploits_000013_030A35F0", "step.step_exploits_000014_D88F6EAD" ] }, "content.p_exploits_000015_9A002641" ] }, "exploit_kits-latest-en.json": { "title": "title_exploit_kits_000001_BDA1D9D6", "title_exploit_kits_000001_BDA1D9D6": "Exploit kits", "shortdesc": "shortdesc_exploit_kits_000002_64014B39", "shortdesc_exploit_kits_000002_64014B39": "Exploit kits are toolkits used by attackers to manage exploits and deliver harmful programs to a vulnerable computer or device. ", "content.p_exploit_kits_00000E_944ED137": "An exploit kit contains an inventory of exploits, each of which can take advantage of a flaw (vulnerability) in a program, computer or device. The kit itself is usually hosted on a harmful or a hacked site, so that any computer or device that visits the site is exposed to its effects.", "content.p_exploit_kits_000011_E1C614FA": "When a new computer or device connects to the booby-trapped site, the exploit kit probes it for any flaws that can be affected by an exploit in the kit's inventory. If one is found, the kit launches the exploit to take advantage of that vulnerability.", "content.p_exploit_kits_000012_7154202D": "After the computer or device is compromised, the exploit kit can deliver a payload to it. This is usually another harmful program that is installed and launched on the computer or device, which in turn performs other unauthorized actions.", "content.p_exploit_kits_000014_1E819B9A": "Exploit kits are modular. Their controllers can add or remove exploits and payloads from the toolkit.", "desc": [ "content.p_exploit_kits_00000E_944ED137", "content.p_exploit_kits_000011_E1C614FA", "content.p_exploit_kits_000012_7154202D", "content.p_exploit_kits_000014_1E819B9A" ] }, "rootkits-latest-en.json": { "title": "title_rootkits_000001_85C023C7", "title_rootkits_000001_85C023C7": "Rootkits", "shortdesc": "shortdesc_rootkits_000002_3F2FA71F", "shortdesc_rootkits_000002_3F2FA71F": "Rootkits are programs that make other malware difficult to find. ", "content.p_rootkits_00000D_12D48915": "Rootkit programs subvert the control of the operating system from its legitimate functions. Usually, a rootkit tries to obscure its installation and prevent its removal by concealing running processes, files or system data from the operating system. In general, rootkits do this to hide malicious activity on the computer.", "content.title_rootkits_00000E_A89271DC": "Protection against userspace rootkits ", "content.p_rootkits_00000F_20A41167": "If an attacker has gained an access to the system and tries to install a userspace rootkit by replacing various system utilities, HIPS detects modified system files and alerts the administrator.", "desc": [ "content.p_rootkits_00000D_12D48915", "content.title_rootkits_00000E_A89271DC", "content.p_rootkits_00000F_20A41167" ] }, "installation-latest-en.json": { "title": "title_installation_000001_748F0A9A", "title_installation_000001_748F0A9A": "Installation", "shortdesc": "shortdesc_installation_000002_23A0536A", "shortdesc_installation_000002_23A0536A": "This section contains instructions for installing the product. ", "desc": [] }, "concept_opg_mn3_b1c-latest-en.json": { "title": "title_installing_linux_psb_00000E23D", "title_installing_linux_psb_00000E23D": "Installing the product for use with WithSecure Elements Endpoint Protection", "shortdesc": "shortdesc_installing_linux_psb_00000246B", "shortdesc_installing_linux_psb_00000246B": "These deployment methods are suitable for companies that use Linux devices and want to deploy WithSecure Elements Endpoint Agent.", "content.p_installing_linux_psb_000003EB5": "WithSecure Elements Endpoint Agent for Linux provides two alternative methods for installing the agent on managed endpoint devices:", "choice.choice_installing_linux_psb_00000A076": "a DEB or RPM package", "choice.choice_installing_linux_psb_00001B80F": "a generic installer package", "content.p_installing_linux_psb_0000162B3": "Choose the correct package format based on the Linux distribution:", "step.step_installing_linux_psb_00001606F": "DEB packages are compatible with Debian and Ubuntu systems.", "step.step_installing_linux_psb_000017478": "RPM packages are compatible with AlmaLinux, Amazon Linux, Rocky Linux, Oracle Linux, Red Hat Enterprise Linux, and SUSE Linux Enterprise Server systems.", "step.step_installing_linux_psb_0000161B3": "You can use the generic installer package on all supported systems.", "content.p_installing_linux_psb_00001C4BA": "There are two versions available for download: AMD64 and ARM64. You need to select the version that matches you image architecture.", "content.p_installing_linux_psb_000010131": "When using any of the installers, you download the installer and make sure that the dependencies are installed. You then run the commands to activate the product.", "content.p_installing_linux_psb_00001D410": "When you install the product in WithSecure Elements Endpoint Protection managed mode, you can use the WithSecure Elements Endpoint Protection portal to centrally manage product installations.", "content.p_installing_linux_psb_00001A20E": "The installation process consists of two steps: installing the product and activating it. The product requires a connection to cloud services for database updates and for the subscription validation. If the subscription cannot be validated for two weeks, the product stops working.", "desc": [ "content.p_installing_linux_psb_000003EB5", { "choices.ul_installing_linux_psb_00000AB25": [ "choice.choice_installing_linux_psb_00000A076", "choice.choice_installing_linux_psb_00001B80F" ] }, "content.p_installing_linux_psb_0000162B3", { "steps.ul_installing_linux_psb_00001655F": [ "step.step_installing_linux_psb_00001606F", "step.step_installing_linux_psb_000017478", "step.step_installing_linux_psb_0000161B3" ] }, "content.p_installing_linux_psb_00001C4BA", "content.p_installing_linux_psb_000010131", "content.p_installing_linux_psb_00001D410", "content.p_installing_linux_psb_00001A20E" ] }, "installing_psb-latest-en.json": { "title": "title_installing_psb_000001_A86EAB3E", "title_installing_psb_000001_A86EAB3E": "Installing the product for use with WithSecure Elements Endpoint Protection", "shortdesc": "shortdesc_installing_psb_000002_F6C220F1", "shortdesc_installing_psb_000002_F6C220F1": "When you install the product in WithSecure Elements Endpoint Protection managed mode, you can use the WithSecure Elements Endpoint Protection portal to centrally manage product installations. ", "content.p_installing_psb_000010_53359CE9": "The installation process consists of two steps: installing the product and activating it.", "content.p_installing_psb_000011_CB516F76": "The product is distributed in three different installation package formats. Choose the correct package format based on the Linux distribution.", "step.step_installing_psb_000013_50190EE7": "DEB packages are compatible with Debian and Ubuntu systems.", "step.step_installing_psb_000014_81356E6A": "RPM packages are compatible with AlmaLinux, Amazon Linux, CentOS, Oracle Linux, Red Hat Enterprise Linux, and SUSE Linux Enterprise Server systems.", "step.step_installing_psb_000015_92090798": "You can use the WithSecure installer to automatically install and activate the product on any supported system.", "content.p_installing_psb_000016_DCEE9F72": "The product requires a connection to cloud services for database updates and for the subscription validation. If the subscription cannot be validated for two weeks, the product stops working.", "substep.substep_installing_psb_00001B_9CA8C3CA": "Log in to WithSecure Elements Security Center.", "substep.substep_installing_psb_00001E_150F798B": "Open Endpoint Protection > Downloads.", "substep.substep_installing_psb_000023_B7B95B82": "Download the installation package under WithSecure Elements Agent for Servers.", "substep.substep_installing_psb_000026_C312B2D3": "Log in to the Linux host as root.", "subsubchoice.choice_installing_psb_00002D_D9ADF7FB": "Amazon 2, CentOS 7, Oracle Linux 7, RHEL 7: libcurl, python", "subsubchoice.choice_installing_psb_000030_7CADAFBB": "AlmaLinux 8, CentOS Stream 8, Oracle Linux 8, RHEL 8, Rocky Linux 8: libcurl, python36 or python39", "subsubchoice.choice_installing_psb_000034_B2119841": "AlmaLinux 9, Oracle Linux 9, RHEL 9 , Rocky Linux 9: libcurl, python3", "subsubchoice.choice_installing_psb_000037_8C92EC56": "Debian 11, Ubuntu 20.04: libcurl4, python3", "subsubchoice.choice_installing_psb_00003A_D08D0B0E": "SUSE Linux Enterprise Server: libcurl4, python3", "subsubchoice.choice_installing_psb_00003D_88BEE2D6": "Ubuntu 22.04: libcurl4, python3", "content.p_installing_psb_00002B_9AD3956C": "", "content.note_installing_psb_000041_683B848F": "Note: WithSecure Elements Endpoint Detection and Response requires the auditd service to be installed and running on the system.", "substep.substep_installing_psb_000029_BE53F588": "Check that the required dependencies are installed:", "subsubchoice.choice_installing_psb_000048_21B6934D": "On RPM-based distributions: rpm -Uvh linuxsecurity-installer.rpm", "subsubchoice.choice_installing_psb_00004A_B723111A": "On DEB-based distributions: dpkg -i linuxsecurity-installer.deb", "content.p_installing_psb_00004F_0BE7B216": "Adding the profile ID is optional but by adding it, the installation is associated with the correct profile automatically. Use the numeric profile ID that can be found in the profile editor view in the portal.", "subsubchoice.choice_installing_psb_00004C_769C3632": "Using the WithSecure installer: ./linuxsecurity-installer --subscription-key SUBSCRIPTION-KEY --profile-id PROFILE-ID", "content.p_installing_psb_000046_A8B2B630": "", "content.note_installing_psb_000051_B6A923E2": "Note: When using the WithSecure installer, you can also provide the subscription key and the profile ID by renaming the installation package, for example linuxsecurity-installer-[SUBSCRIPTION-KEY]-[profile=ID] (use the [] brackets around the actual subscription key and enter the profile ID after profile=). With the renamed installation package, you can run the installation package without any additional command-line arguments.", "substep.substep_installing_psb_000044_73DFA3F9": "Run the installation command:", "step.step_installing_psb_000018_CD83C2F6": "Install the product on each host:", "content.note_installing_psb_000058_ACEB9A44": "Note: This step is not needed when you use the WithSecure installer.", "content.p_installing_psb_000059_1B281D65": "/opt/f-secure/linuxsecurity/bin/activate --psb --subscription-key SUBSCRIPTION-KEY", "step.step_installing_psb_000055_63427DBB": "Run the following command to activate the product:", "content.note_installing_psb_00005C_F7CB8E42": "Note: You can use the --override-distro option to install the product on a distribution that is not officially supported. For example, --override-distro rhel:8.6. Note that WithSecure cannot offer support for any issues with unsupported distributions.", "content.note_installing_psb_00005F_F88B2DED": "Note: To use an HTTP proxy during the activation process, add the --http-proxy command line option. You can use this option in the following formats: ", "desc": [ "content.p_installing_psb_000010_53359CE9", "content.p_installing_psb_000011_CB516F76", { "steps.ul_installing_psb_000012_8A1A58DC": [ "step.step_installing_psb_000013_50190EE7", "step.step_installing_psb_000014_81356E6A", "step.step_installing_psb_000015_92090798" ] }, "content.p_installing_psb_000016_DCEE9F72", { "steps.steps_installing_psb_000017_156ABD73": [ "step.step_installing_psb_000018_CD83C2F6", { "substeps.substepsalpha_installingalpha_psbalpha_00001Aalpha_F00E8B47": [ "substep.substep_installing_psb_00001B_9CA8C3CA", "substep.substep_installing_psb_00001E_150F798B", "substep.substep_installing_psb_000023_B7B95B82", "substep.substep_installing_psb_000026_C312B2D3", "substep.substep_installing_psb_000029_BE53F588", "content.p_installing_psb_00002B_9AD3956C", { "subsubchoices.ul_installing_psb_00002C_42DDE941": [ "subsubchoice.choice_installing_psb_00002D_D9ADF7FB", "subsubchoice.choice_installing_psb_000030_7CADAFBB", "subsubchoice.choice_installing_psb_000034_B2119841", "subsubchoice.choice_installing_psb_000037_8C92EC56", "subsubchoice.choice_installing_psb_00003A_D08D0B0E", "subsubchoice.choice_installing_psb_00003D_88BEE2D6" ] }, "content.note_installing_psb_000041_683B848F", "substep.substep_installing_psb_000044_73DFA3F9", "content.p_installing_psb_000046_A8B2B630", { "subsubchoices.ul_installing_psb_000047_EA1DDCF4": [ "subsubchoice.choice_installing_psb_000048_21B6934D", "subsubchoice.choice_installing_psb_00004A_B723111A", "subsubchoice.choice_installing_psb_00004C_769C3632", "content.p_installing_psb_00004F_0BE7B216" ] }, "content.note_installing_psb_000051_B6A923E2" ] }, "step.step_installing_psb_000055_63427DBB", "content.note_installing_psb_000058_ACEB9A44", "content.p_installing_psb_000059_1B281D65" ] }, "content.note_installing_psb_00005C_F7CB8E42", "content.note_installing_psb_00005F_F88B2DED" ], "related": [ "using_http_proxies-latest-en", "task_activating_via_connector_proxy-latest-en" ] }, "task_fqp_l43_b1c-latest-en.json": { "title": "title_installing_deb_rpm_000001_6CD5", "title_installing_deb_rpm_000001_6CD5": "Installing the product using a DEB or RPM package", "shortdesc": "shortdesc_installing_deb_rpm_000002_D620", "shortdesc_installing_deb_rpm_000002_D620": "Instructions for using a DEB or RPM package to install the product.", "content.p_installing_deb_rpm_00000C_32B9": "Make sure that the required dependencies for your platform are installed. See System requirements.", "content.note_installing_deb_rpm_00000F_A23F": "Note: There are platform architecture-specific installers. You need to download the matching one.", "substep.substep_installing_deb_rpm_000014_5D79": "Go to the WithSecure download page and download the DEB or RPM installer package that matches your operating system and architecture, either AMD64 or ARM64.", "substep.substep_installing_deb_rpm_000017_FC59": "Log in to the Linux host as root.", "subsubchoice.choice_installing_deb_rpm_00001E_BB3A": "Depending on whether you use an AMD64 or ARM64 version, on DEB-based distributions, run one of the following commands: dpkg -i linuxsecurity-installer_amd64.debdpkg -i linuxsecurity-installer_arm64.deb", "subsubchoice.choice_installing_deb_rpm_000021_383C": "Depending on whether you use an AMD64 or ARM64 version, on RPM-based distributions, run one the following commands: rpm -Uvh linuxsecurity-installer.x86_64.rpmrpm -Uvh linuxsecurity-installer.aarch64.rpm", "content.p_installing_deb_rpm_00001C_1190": "", "substep.substep_installing_deb_rpm_00001A_0986": "Deploy the installer package on the endpoint device using the system package manager:", "step.step_installing_deb_rpm_000011_7335": "To install the product, do the following:", "content.p_installing_deb_rpm_000026_D1B6": "/opt/f-secure/linuxsecurity/bin/activate --psb --subscription-key SUBSCRIPTION-KEY --profile-id PROFILE-ID", "content.note_installing_deb_rpm_000028_4D67": "Note: Replace SUBSCRIPTION-KEY with the product subscription key. The --profile-id parameter is optional but by adding it, the agent installation can be associated with one of the profiles available in the profile editor view in the portal. Replace PROFILE-ID with the numeric identifier of the profile.", "step.step_installing_deb_rpm_000024_7413": "To activate the product, run the following command:", "content.note_installing_deb_rpm_000029_01A0": "Note: You can use the --override-distro option to install the product on a distribution that is not officially supported. For example, --override-distro rhel:8.6. Note that WithSecure cannot offer support for any issues with unsupported distributions.", "content.note_installing_deb_rpm_00002C_B21C": "Note: To use an HTTP proxy during the activation process, add the --http-proxy command line option. You can use this option in the following formats:", "desc": [ "content.p_installing_deb_rpm_00000C_32B9", "content.note_installing_deb_rpm_00000F_A23F", { "steps.steps_installing_deb_rpm_000010_191E": [ "step.step_installing_deb_rpm_000011_7335", { "substeps.substepsalpha_installingalpha_debalpha_rpmalpha_000013alpha_4DC8": [ "substep.substep_installing_deb_rpm_000014_5D79", "substep.substep_installing_deb_rpm_000017_FC59", "substep.substep_installing_deb_rpm_00001A_0986", "content.p_installing_deb_rpm_00001C_1190", { "subsubchoices.ul_installing_deb_rpm_00001D_57FC": [ "subsubchoice.choice_installing_deb_rpm_00001E_BB3A", "subsubchoice.choice_installing_deb_rpm_000021_383C" ] } ] }, "step.step_installing_deb_rpm_000024_7413", "content.p_installing_deb_rpm_000026_D1B6", "content.note_installing_deb_rpm_000028_4D67" ] }, "content.note_installing_deb_rpm_000029_01A0", "content.note_installing_deb_rpm_00002C_B21C" ] }, "task_nqm_ms3_b1c-latest-en.json": { "title": "title_installing_generic_000001_CFE1", "title_installing_generic_000001_CFE1": "Installing the product using a generic installer package", "shortdesc": "shortdesc_installing_generic_000002_B485", "shortdesc_installing_generic_000002_B485": "Instructions for using a generic package to install the product.", "content.note_installing_generic_00000C_03FB": "Note: There are platform architecture-specific installers. You need to download the matching one.", "substep.substep_installing_generic_000011_1915": "Log in to WithSecure Elements Security Center.", "substep.substep_installing_generic_000014_240D": "Select Endpoint Protection > Downloads.", "substep.substep_installing_generic_000019_E0B2": "Under WithSecure Elements Agent for Servers, download the installer that matches your architecture, either AMD64 or ARM64.", "substep.substep_installing_generic_00001C_6293": "Log in to the Linux host as root.", "substep.substep_installing_generic_00001F_AA25": "For checking that the required dependencies are installed, see System requirements.", "content.p_installing_generic_000024_2E95": "chmod +x ./linuxsecurity-installer.amd64.bin chmod +x ./linuxsecurity-installer.arm64.bin", "substep.substep_installing_generic_000022_71AC": "Depending on whether you use an AMD64 or ARM64 version, run one of the following commands to set the executable bit on the installer file that you downloaded:", "step.step_installing_generic_00000E_87A7": "To install the product, do the following:", "content.p_installing_generic_000029_70DF": "./linuxsecurity-installer.amd64.bin --subscription-key SUBSCRIPTION-KEY --profile-id PROFILE-ID ./linuxsecurity-installer.arm64.bin --subscription-key SUBSCRIPTION-KEY --profile-id PROFILE-ID", "content.note_installing_generic_00002C_DF8E": "Note: Replace SUBSCRIPTION-KEY with the product subscription key. The PROFILE-ID parameter is optional but by adding it, the agent installation can be associated with one of the profiles available in the profile editor view in the portal. Replace PROFILE-ID with the numeric identifier of the profile.", "step.step_installing_generic_000027_5905": "Depending on whether you use an AMD64 or ARM64 version, run one of the following commands to install and activate the product:", "content.note_installing_generic_00002D_CDC9": "Note: You can also provide the subscription key and the profile ID for the installation by renaming the \"linuxsecurity-installer\" program to match one of the following patterns before running the program: linuxsecurity-installer-[SUBSCRIPTION-KEY] or linuxsecurity-installer-[SUBSCRIPTION-KEY]-[profile=PROFILE-ID]. It is important that you use [ ] brackets around the subscription key and profile=PROFILE-ID. The renamed installer program can be run without any command line-arguments.", "content.note_installing_generic_000030_C700": "Note: You can use the --override-distro option to install the product on a distribution that is not officially supported. For example, --override-distro rhel:8.6. Note that WithSecure cannot offer support for any issues with unsupported distributions.", "content.note_installing_generic_000033_BBD0": "Note: To use an HTTP proxy during the activation process, add the --http-proxy command line option. You can use this option in the following formats:", "desc": [ "content.note_installing_generic_00000C_03FB", { "steps.steps_installing_generic_00000D_4282": [ "step.step_installing_generic_00000E_87A7", { "substeps.substepsalpha_installingalpha_genericalpha_000010alpha_FFE6": [ "substep.substep_installing_generic_000011_1915", "substep.substep_installing_generic_000014_240D", "substep.substep_installing_generic_000019_E0B2", "substep.substep_installing_generic_00001C_6293", "substep.substep_installing_generic_00001F_AA25", "substep.substep_installing_generic_000022_71AC", "content.p_installing_generic_000024_2E95" ] }, "step.step_installing_generic_000027_5905", "content.p_installing_generic_000029_70DF", "content.note_installing_generic_00002C_DF8E" ] }, "content.note_installing_generic_00002D_CDC9", "content.note_installing_generic_000030_C700", "content.note_installing_generic_000033_BBD0" ] }, "delaying_product_activation-latest-en.json": { "title": "title_delaying_product_activat_0FE9E", "title_delaying_product_activat_0FE9E": "Delaying product activation", "shortdesc": "shortdesc_delaying_product_activat_0A329", "shortdesc_delaying_product_activat_0A329": "Instead of activating the product immediately during installation or deployment, you can set the product activation to take place the next time the computer is turned on. ", "content.p_delaying_product_activat_0002F": "For example, you may want to delay activation if you are installing the product within a virtual machine template that is used for multiple virtual machine instances. In such a setup, you could install the product in the template and schedule activation for the next time the virtual machine is started. This approach allows individual virtual machines to be activated separately as they are taken into use.", "content.p_delaying_product_activat_037F8": "/opt/f-secure/linuxsecurity/bin/activate --next-boot --psb --subscription-key SUBSCRIPTION-KEY", "subchoice.choice_delaying_product_activat_08788": "If you are using an .rpm or .deb installation package, add the --next-boot argument to the activate command, for example:", "content.p_delaying_product_activat_0B7CF": "./linuxsecurity-installer --next-boot --subscription-key SUBSCRIPTION-KEY", "subchoice.choice_delaying_product_activat_0E71F": "If you are using the WithSecure installer, add the --next-boot argument to the installer command, for example:", "content.p_delaying_product_activat_07B74": "This sets Linux Protection to be activated when the computer is next started.", "step.step_delaying_product_activat_07040": "To set activation to take place the next time the computer starts up:", "step.step_delaying_product_activat_0F767": "The product activates automatically when the system is rebooted. No user interaction is necessary during this activation process.", "desc": [ "content.p_delaying_product_activat_0002F", { "steps.steps_delaying_product_activat_09387": [ "step.step_delaying_product_activat_07040", { "subchoices.choices_delaying_product_activat_013C3": [ "subchoice.choice_delaying_product_activat_08788", "content.p_delaying_product_activat_037F8", "subchoice.choice_delaying_product_activat_0E71F", "content.p_delaying_product_activat_0B7CF" ] }, "content.p_delaying_product_activat_07B74", "step.step_delaying_product_activat_0F767" ] } ] }, "task_activating_via_connector_proxy-latest-en.json": { "title": "title_activating_via_connector_0F46C", "title_activating_via_connector_0F46C": "Activating Linux Security through an Elements Connector proxy", "shortdesc": "shortdesc_activating_via_connector_0B9EA", "shortdesc_activating_via_connector_0B9EA": "Activate the product in networks where outbound traffic goes through an Elements Connector that acts as an HTTP proxy.", "content.p_activating_via_connector_0041A": "When outbound traffic from your Linux hosts goes through an Elements Connector that acts as an HTTP proxy, you can activate the product with a single command. The command combines the activation parameters with the --http-proxy option, where the proxy address is the address of the Elements Connector.", "content.p_activating_via_connector_0FE55": "/opt/f-secure/linuxsecurity/bin/activate --psb --subscription-key SUBSCRIPTION-KEY --http-proxy=EC-ADDRESS:80 Replace SUBSCRIPTION-KEY with your subscription key and EC-ADDRESS with the address of the Elements Connector, which accepts proxy connections on port 80.", "content.note_activating_via_connector_08AD1": "Note: The product supports basic authentication for HTTP proxies. If the specified proxy requires authentication, use the --http-proxy=username:password@host:port format to specify the credentials for the proxy.", "step.step_activating_via_connector_0C362": "Run the activation command with the Elements Connector address as the HTTP proxy:", "desc": [ "content.p_activating_via_connector_0041A", { "steps.steps_activating_via_connector_04F98": [ "step.step_activating_via_connector_0C362", "content.p_activating_via_connector_0FE55", "content.note_activating_via_connector_08AD1" ] } ] }, "migrating_ls64_to_elements-latest-en.json": { "title": "title_migrating_ls64_to_elemen_056ED", "title_migrating_ls64_to_elemen_056ED": "Migrating from Business Suite to WithSecure Elements", "shortdesc": "shortdesc_migrating_ls64_to_elemen_02257", "shortdesc_migrating_ls64_to_elemen_02257": "You can migrate Policy Manager-managed Linux Security 64 systems to WithSecure Elements using the elements-migrator command.", "content.note_migrating_ls64_to_elemen_09017": "Note: A WithSecure Elements subscription key is required for this migration.", "desc": [ "content.note_migrating_ls64_to_elemen_09017" ] }, "inspecting_migration_status-latest-en.json": { "title": "title_inspecting_migration_sta_0E47C", "title_inspecting_migration_sta_0E47C": "Inspecting the migration status", "shortdesc": "shortdesc_inspecting_migration_sta_0C498", "shortdesc_inspecting_migration_sta_0C498": "Instructions for inspecting the migration status.", "content.p_inspecting_migration_sta_054D1": "To check the migration status of WithSecure Elements:", "content.p_inspecting_migration_sta_06D71": "/opt/f-secure/linuxsecurity/bin/elements-migrator status", "step.step_inspecting_migration_sta_0B0F7": "Run the following bash command:", "desc": [ "content.p_inspecting_migration_sta_054D1", { "steps.steps_inspecting_migration_sta_0387A": [ "step.step_inspecting_migration_sta_0B0F7", "content.p_inspecting_migration_sta_06D71" ] } ] }, "migrating_ls64_to_withsecure_elements-latest-en.json": { "title": "title_migrating_ls64_to_wse_00002E1E", "title_migrating_ls64_to_wse_00002E1E": "Migrating Linux Security 64 to WithSecure Elements", "shortdesc": "shortdesc_migrating_ls64_to_wse_00002DD0", "shortdesc_migrating_ls64_to_wse_00002DD0": "Instructions for migrating Policy Manager-managed Linux Security 64 to WithSecure Elements.", "content.p_migrating_ls64_to_wse_00005839": "To migrate Linux Security 64:", "content.p_migrating_ls64_to_wse_0000DEE0": "/opt/f-secure/linuxsecurity/bin/elements-migrator migrate SUBSCRIPTION-KEY", "step.step_migrating_ls64_to_wse_00009C3A": "Run the following bash command:", "step.step_migrating_ls64_to_wse_000007CF": "Replace SUBSCRIPTION-KEY with your actual WithSecure Elements subscription key.", "desc": [ "content.p_migrating_ls64_to_wse_00005839", { "steps.steps_migrating_ls64_to_wse_00005177": [ "step.step_migrating_ls64_to_wse_00009C3A", "content.p_migrating_ls64_to_wse_0000DEE0", "step.step_migrating_ls64_to_wse_000007CF" ] } ] }, "associating_migrated_devies_with_a_profile-latest-en.json": { "title": "title_assigning_profiles_000001_0D8F", "title_assigning_profiles_000001_0D8F": "Assigning profile to migrated devices", "shortdesc": "shortdesc_assigning_profiles_000002_376D", "shortdesc_assigning_profiles_000002_376D": "You can automatically assign a specific profile to migrated devices.", "content.p_assigning_profiles_00000C_967B": "To do that, you need to specify the profile ID in the migration command using the --profile-id option.", "content.p_assigning_profiles_000011_14DA": "/opt/f-secure/linuxsecurity/bin/elements-migrator migrate --profile-id PROFILE-ID SUBSCRIPTION-KEY
", "step.step_assigning_profiles_00000F_F4FC": "To assign a profile, run the following bash command:", "step.step_assigning_profiles_000013_FAB5": "Replace PROFILE-ID with the numeric ID of the target Elements profile.", "step.step_assigning_profiles_000015_58BA": "Replace SUBSCRIPTION-KEY with your valid subscription key.", "desc": [ "content.p_assigning_profiles_00000C_967B", { "steps.steps_assigning_profiles_00000E_5322": [ "step.step_assigning_profiles_00000F_F4FC", "content.p_assigning_profiles_000011_14DA", "step.step_assigning_profiles_000013_FAB5", "step.step_assigning_profiles_000015_58BA" ] } ] }, "uninstalling_product-latest-en.json": { "title": "title_uninstalling_product_00000691E", "title_uninstalling_product_00000691E": "Uninstalling the product", "shortdesc": "shortdesc_uninstalling_product_00000057B", "shortdesc_uninstalling_product_00000057B": "You can uninstall the product from the command line. ", "step.step_uninstalling_product_00000B4D6": "Log in to the Linux host as root.", "content.note_uninstalling_product_000010DB2": "Note: The command that is given here is for the current version of the product. If you are uninstalling an older version, use f-secure-linuxsecurity as the package name instead.", "subchoice.choice_uninstalling_product_000017603": "RHEL-based distributions: rpm -e linuxsecurity-installer", "subchoice.choice_uninstalling_product_00001CA0C": "Debian-based distributions: dpkg -r linuxsecurity-installer", "content.p_uninstalling_product_0000126AC": "If the package removal command fails, run the following command: rm -rf /opt/f-secure /etc/opt/f-secure /var/opt/f-secure. This command removes the remaining files or systemd services if any. Finally, restart the system to make sure that all hanging services and processes are run down.", "step.step_uninstalling_product_000005DB9": "Run the uninstallation command:", "content.p_uninstalling_product_00001908C": "The uninstall command does not remove configuration files or log files that the product has generated. Check the product directories for remaining files and remove them if you are sure that you do not need them anymore.", "desc": [ { "steps.steps_uninstalling_product_00000B404": [ "step.step_uninstalling_product_00000B4D6", "step.step_uninstalling_product_000005DB9", "content.note_uninstalling_product_000010DB2", { "subchoices.choices_uninstalling_product_00001EAA4": [ "subchoice.choice_uninstalling_product_000017603", "subchoice.choice_uninstalling_product_00001CA0C" ] }, "content.p_uninstalling_product_0000126AC" ] }, "content.p_uninstalling_product_00001908C" ] }, "administering_psb-latest-en.json": { "title": "title_administering_psb_000001_710F9", "title_administering_psb_000001_710F9": "Using the product", "shortdesc": "shortdesc_administering_psb_000002_40B53", "shortdesc_administering_psb_000002_40B53": "You can configure the product settings with the lsctl command-line tool or (for centrally managed computers) through the WithSecure Elements Endpoint Protection (EPP) portal. ", "content.p_administering_psb_00000F_DCAD7": "Use the topics in this section to configure product features and settings. You can manage settings locally with the lsctl command-line tool or centrally through the WithSecure Elements Endpoint Protection (EPP) portal.", "desc": [ "content.p_administering_psb_00000F_DCAD7" ] }, "psb_basics-latest-en.json": { "title": "title_psb_basics_000001_AFE1D138", "title_psb_basics_000001_AFE1D138": "Basics of using the WithSecure Elements Endpoint Protection portal", "shortdesc": "shortdesc_psb_basics_000002_F52CA6FF", "shortdesc_psb_basics_000002_F52CA6FF": "The WithSecure Elements Endpoint Protection portal is used to change the settings and to view statistics of the WithSecure products. ", "content.p_psb_basics_000010_A768660E": "Use the settings on the Profiles > Linux Protection page to configure the product.", "content.p_psb_basics_000014_43D00CBF": "For more information about the WithSecure Elements Endpoint Protection portal, see the WithSecure Elements Endpoint Protection administrator's guide.", "desc": [ "content.p_psb_basics_000010_A768660E", "content.p_psb_basics_000014_43D00CBF" ] }, "configuring_settings-latest-en.json": { "title": "title_configuring_settings_000000725", "title_configuring_settings_000000725": "Configuring settings with the lsctl utility", "shortdesc": "shortdesc_configuring_settings_0000017FD", "shortdesc_configuring_settings_0000017FD": "You can check and edit the product settings using the lsctl command-line utility. ", "content.note_configuring_settings_00001AF3E": "Note: If a setting for the distributed profile is locked in the Elements Endpoint Protection portal, that setting is enforced and you cannot edit it with the lsctl command-line utility.", "content.p_configuring_settings_000010686": "To use the lsctl utility:", "step.step_configuring_settings_00001DC59": "Log in to the Linux host as root.", "subchoice.choice_configuring_settings_000010E99": "To see the current value of a setting, run /opt/f-secure/linuxsecurity/bin/lsctl get [OPTIONS] [SETTING]", "subchoice.choice_configuring_settings_000013F4B": "To assign a new value to a setting, run /opt/f-secure/linuxsecurity/bin/lsctl set [OPTIONS] [SETTING] [VALUE]", "subchoice.choice_configuring_settings_0000285CC": "To add an entry to a setting that holds several values, run /opt/f-secure/linuxsecurity/bin/lsctl add [OPTIONS] [SETTING] [VALUE]", "subchoice.choice_configuring_settings_000023EA4": "To remove an entry from a setting that holds several values, run /opt/f-secure/linuxsecurity/bin/lsctl del [OPTIONS] [SETTING] [KEY]", "subchoice.choice_configuring_settings_00002DF27": "To clear the value of a setting, run /opt/f-secure/linuxsecurity/bin/lsctl reset [OPTION] [SETTING]", "subchoice.choice_configuring_settings_000022AD0": "To see a list of the operations available for a setting, run /opt/f-secure/linuxsecurity/bin/lsctl help [OPTIONS] [SETTING]", "subchoice.choice_configuring_settings_000024F1E": "To load product settings from a backup, run /opt/f-secure/linuxsecurity/bin/lsctl load [OPTIONS] [SETTING] [VALUE]", "subchoice.choice_configuring_settings_0000202AC": "To get a list of all available settings, run /opt/f-secure/linuxsecurity/bin/lsctl -h", "step.step_configuring_settings_0000195BF": "Use the following commands:", "content.p_configuring_settings_00002DE9B": "The get, set, add, del, and load commands support the following options:", "content.dt_configuring_settings_000039F42": "--json, -j ", "content.dd_configuring_settings_000033B78": "Treat input as JSON and produce output in JSON format.", "content.dt_configuring_settings_0000346C8": "--raw, -r ", "content.dd_configuring_settings_0000389FD": "This is currently the default. Raw is an alternative input/output format that is similar to JSON with the following changes:", "choice.choice_configuring_settings_00003C84E": "String values are accepted and returned without surrounding quotes.", "choice.choice_configuring_settings_000031A70": "Boolean values accept additional expressions such as yes and no in addition to true and false.", "content.note_configuring_settings_00004D4FC": "Note: The default input/output format for lsctl is subject to change. If you rely on the format of lsctl, specify either --json or --raw explicitly when lsctl is run. In addition to setting values, the keys for array-type settings are considered as input and need to be entered in the correct format.", "content.p_configuring_settings_00004867C": "The set, add, and load commands accept the following options:", "content.dt_configuring_settings_000046417": "--prompt, -p ", "content.dd_configuring_settings_00004FD0F": "Prompt for input using a text editor.", "content.dt_configuring_settings_000051FBB": "--file, -f [PATH] ", "content.dd_configuring_settings_000054729": "Read the input value from a file. If the path is set to -, the input value is read from the standard input.", "content.p_configuring_settings_000054DA4": "If you use the --prompt or --file options, do not enter a [VALUE] for the command.", "content.note_configuring_settings_00005A76B": "Note: The set and load commands differ in how they handle settings that are not included in the input. The set command does not change the current values for any settings that are missing from the input, whereas the load command resets those settings to their default values.", "desc": [ "content.note_configuring_settings_00001AF3E", "content.p_configuring_settings_000010686", { "steps.steps_configuring_settings_000017EEC": [ "step.step_configuring_settings_00001DC59", "step.step_configuring_settings_0000195BF", { "subchoices.choices_configuring_settings_000016A43": [ "subchoice.choice_configuring_settings_000010E99", "subchoice.choice_configuring_settings_000013F4B", "subchoice.choice_configuring_settings_0000285CC", "subchoice.choice_configuring_settings_000023EA4", "subchoice.choice_configuring_settings_00002DF27", "subchoice.choice_configuring_settings_000022AD0", "subchoice.choice_configuring_settings_000024F1E", "subchoice.choice_configuring_settings_0000202AC" ] } ] }, "content.p_configuring_settings_00002DE9B", { "dl.dl_configuring_settings_000035A94": [ { "dlentry.dlentry_configuring_settings_00003A6C7": [ "content.dt_configuring_settings_000039F42", "content.dd_configuring_settings_000033B78" ] }, { "dlentry.dlentry_configuring_settings_00003768F": [ "content.dt_configuring_settings_0000346C8", "content.dd_configuring_settings_0000389FD", { "choices.ul_configuring_settings_00003E61C": [ "choice.choice_configuring_settings_00003C84E", "choice.choice_configuring_settings_000031A70" ] } ] } ] }, "content.note_configuring_settings_00004D4FC", "content.p_configuring_settings_00004867C", { "dl.dl_configuring_settings_00004E614": [ { "dlentry.dlentry_configuring_settings_000046E7D": [ "content.dt_configuring_settings_000046417", "content.dd_configuring_settings_00004FD0F" ] }, { "dlentry.dlentry_configuring_settings_000055EF1": [ "content.dt_configuring_settings_000051FBB", "content.dd_configuring_settings_000054729" ] } ] }, "content.p_configuring_settings_000054DA4", "content.note_configuring_settings_00005A76B" ] }, "lsctl_setting_types-latest-en.json": { "title": "title_lsctl_setting_types_00000197B5", "title_lsctl_setting_types_00000197B5": "Setting types and the settings tree", "shortdesc": "shortdesc_lsctl_setting_types_0000020D8E", "shortdesc_lsctl_setting_types_0000020D8E": "Each product setting has a type and a value, and the settings are organized in a tree-like structure. ", "content.p_lsctl_setting_types_00000F7AFB": "There are five basic types of settings:", "step.step_lsctl_setting_types_0000118A3D": "Boolean (true or false)", "step.step_lsctl_setting_types_0000147870": "Text", "step.step_lsctl_setting_types_000015C266": "Numbers", "step.step_lsctl_setting_types_0000163A80": "Objects, which combine a specific group of settings in one entity by assigning a name to each member. You can inspect and assign values to objects.", "step.step_lsctl_setting_types_0000176708": "Arrays, which are collections that contain a varying number of members. Each array member is identified by a unique key. Array keys are composed of the same basic value types as settings, for example a key might be a string, number, or object. You can add and delete the settings in an array. Each array can have additional restrictions on the type of settings that it accepts, for example it may only accept text-type settings as members.", "content.p_lsctl_setting_types_0000189827": "Product settings are organized in a tree structure, where the root is an object-type setting that contains all the other settings. To inspect this root setting, use the get sub-command, for example:", "content.p_lsctl_setting_types_000030D52A": "# /opt/f-secure/linuxsecurity/bin/lsctl get", "content.p_lsctl_setting_types_000031184C": "{
\"http_proxy\": {
\"enabled\": false,
\"host\": \"localhost\",
\"port\": 3128
},
\"ic\": {
\"enabled\": true,
\"profiles\": []
},
\"oas\": {
\"actions\": {
\"malware\": \"rename\",
\"pua\": \"none\",
\"suspected\": \"none\"
},
\"archive_max_nested\": 5,
\"block_archive_max_nested\": false,
\"block_encrypted_archives\": false,
\"detect_pua\": true,
\"enabled\": true,
\"exclude_paths\": [],
\"include_paths\": [],
\"scan_archives\": false,
\"scan_only_executables\": false
},
...
}", "content.p_lsctl_setting_types_00001C426B": "Note that this example does not include the full output.", "content.p_lsctl_setting_types_00001D4572": "The output shows the setting hierarchy, starting from the root object and continuing through all its child settings (http_proxy, ic, oas, etc.) and their sub-settings recursively.", "content.p_lsctl_setting_types_000021C4BE": "In this example, the root object contains the http_proxy setting, which is an object-type setting that contains three sub-settings: enabled (boolean value setting), host (text setting), and port (number setting).", "content.p_lsctl_setting_types_0000266ADD": "You can also use the get sub-command to inspect only parts of the setting tree. It selects the settings to retrieve using the names that object-type settings assign and the keys of array-type settings.", "content.p_lsctl_setting_types_00002805FA": "For example, you can retrieve the HTTP proxy settings alone as follows:", "content.p_lsctl_setting_types_000032FE80": "# /opt/f-secure/linuxsecurity/bin/lsctl get http_proxy", "content.p_lsctl_setting_types_000033A580": "{
\"enabled\": false,
\"host\": \"localhost\",
\"port\": 3128
}", "content.p_lsctl_setting_types_00002B185F": "In the same way, you can specify the command further to check if the use of an HTTP proxy is enabled by running:", "content.p_lsctl_setting_types_00003465C9": "# /opt/f-secure/linuxsecurity/bin/lsctl get http_proxy enabled", "content.p_lsctl_setting_types_0000353E62": "false", "content.p_lsctl_setting_types_00002E685F": "In addition to their type, settings can have additional constraints on the allowed values. For example, the http_proxy port setting does not allow negative numbers.", "desc": [ "content.p_lsctl_setting_types_00000F7AFB", { "steps.ul_lsctl_setting_types_0000104CE6": [ "step.step_lsctl_setting_types_0000118A3D", "step.step_lsctl_setting_types_0000147870", "step.step_lsctl_setting_types_000015C266", "step.step_lsctl_setting_types_0000163A80", "step.step_lsctl_setting_types_0000176708" ] }, "content.p_lsctl_setting_types_0000189827", "content.p_lsctl_setting_types_000030D52A", "content.p_lsctl_setting_types_000031184C", "content.p_lsctl_setting_types_00001C426B", "content.p_lsctl_setting_types_00001D4572", "content.p_lsctl_setting_types_000021C4BE", "content.p_lsctl_setting_types_0000266ADD", "content.p_lsctl_setting_types_00002805FA", "content.p_lsctl_setting_types_000032FE80", "content.p_lsctl_setting_types_000033A580", "content.p_lsctl_setting_types_00002B185F", "content.p_lsctl_setting_types_00003465C9", "content.p_lsctl_setting_types_0000353E62", "content.p_lsctl_setting_types_00002E685F" ] }, "lsctl_operating_with_settings-latest-en.json": { "title": "title_lsctl_operating_with_set_011DC", "title_lsctl_operating_with_set_011DC": "Operating with settings", "shortdesc": "shortdesc_lsctl_operating_with_set_04D7D", "shortdesc_lsctl_operating_with_set_04D7D": "There are six basic sub-commands for operating with settings: get, set, add, delete, reset, and load. ", "content.title_lsctl_operating_with_set_011C8": "Available sub-commands", "content.dt_lsctl_operating_with_set_08D46": "get ", "content.dd_lsctl_operating_with_set_04F86": "lsctl get [--json | --raw] SETTING...
", "content.dd_lsctl_operating_with_set_0A96B": "Use the get sub-command to inspect the current value of a setting.", "content.dt_lsctl_operating_with_set_0D27C": "set ", "content.dd_lsctl_operating_with_set_089DC": "lsctl set [--json | --raw] [--prompt | --file PATH] SETTING... VALUE
", "content.dd_lsctl_operating_with_set_08FE1": "Use the set sub-command to enter the value for a setting.", "content.dt_lsctl_operating_with_set_05BE3": "add ", "content.dd_lsctl_operating_with_set_019A3": "lsctl add [--json | --raw] [--prompt | --file PATH] SETTING... VALUE
", "content.dd_lsctl_operating_with_set_0D253": "Use the add sub-command to add new members to an array-type setting. The key that is used for the new array member is automatically derived from the value. How the key is derived is specific to each particular setting.", "content.dt_lsctl_operating_with_set_07D62": "delete ", "content.dd_lsctl_operating_with_set_0F192": "lsctl delete [--json | --raw] SETTING... KEY
", "content.dd_lsctl_operating_with_set_09060": "Use the delete sub-command to remove members from array-type settings. This means that you can only use it with settings that are immediate descendants of an array-type setting.
", "content.dd_lsctl_operating_with_set_00A4B": "You can use del as an alias for the delete sub-command.", "content.dt_lsctl_operating_with_set_09FEF": "reset ", "content.dd_lsctl_operating_with_set_090CE": "lsctl reset [--json | --raw] [--all] SETTING...
", "content.dd_lsctl_operating_with_set_09C92": "Use the reset sub-command to clear the local value of a setting. This means that the setting's value is set back to its default value. This also enables the setting to be changed using Policy Manager or Protection Service for Business.", "content.dt_lsctl_operating_with_set_037AE": "load ", "content.dd_lsctl_operating_with_set_079AD": "lsctl load [--json | --raw] [--prompt | --file PATH] SETTING... VALUE
", "content.dd_lsctl_operating_with_set_06CBB": "Use the load sub-command to restore the values for settings.
", "content.dd_lsctl_operating_with_set_01BC0": "", "content.note_lsctl_operating_with_set_072F3": "Note: The set and load commands differ in how they handle settings that are not included in the input. The set command does not change the current values for any settings that are missing from the input, whereas the load command resets those settings to their default values.
", "content.title_lsctl_operating_with_set_0F624": "Providing values for settings", "content.p_lsctl_operating_with_set_0BC9B": "The set and add sub-commands are used to alter setting values. Use the final command-line argument to enter the value to assign to a setting (for set sub-commands) or the member to add to an array-type setting (for add sub-commands).", "content.p_lsctl_operating_with_set_02297": "For example, to set a new value for the http_proxy host setting, you could use the following command: lsctl set http_proxy host example.com", "content.p_lsctl_operating_with_set_02E30": "This assigns example.com as the new value for the host text-type setting.", "content.p_lsctl_operating_with_set_055CE": "When you use the --prompt (-p) flag, lsctl opens a text editor for you to specify the value for a setting. For example: lsctl set --prompt http_proxy host", "content.p_lsctl_operating_with_set_0183D": "This opens a text editor that you can use to enter a new value for the host setting.", "content.p_lsctl_operating_with_set_0DC70": "By default, lsctl opens the editor specified by the EDITOR environment variable. If EDITOR is not set or the specified editor is not found in PATH, lsctl tries to find the following editors in order until it finds one that is available: nano, vim, vi.", "content.p_lsctl_operating_with_set_082BC": "When you use the --file (-f) switch, lsctl reads the value for a setting from a file. For example: lsctl set --file value.txt http_proxy host", "content.p_lsctl_operating_with_set_0F805": "This reads the value for the host setting from the value.txt file. You can also use the special - value to read the value from the standard input. For example: echo -n 'example.com' | lsctl set --file - value.txt http_proxy host", "content.p_lsctl_operating_with_set_0D77E": "This uses the output of the echo command as the value for the host setting.", "desc": [ "content.title_lsctl_operating_with_set_011C8", { "dl.dl_lsctl_operating_with_set_07F04": [ { "dlentry.dlentry_lsctl_operating_with_set_01DCB": [ "content.dt_lsctl_operating_with_set_08D46", "content.dd_lsctl_operating_with_set_04F86", "content.dd_lsctl_operating_with_set_0A96B" ] }, { "dlentry.dlentry_lsctl_operating_with_set_00D9F": [ "content.dt_lsctl_operating_with_set_0D27C", "content.dd_lsctl_operating_with_set_089DC", "content.dd_lsctl_operating_with_set_08FE1" ] }, { "dlentry.dlentry_lsctl_operating_with_set_0BFB5": [ "content.dt_lsctl_operating_with_set_05BE3", "content.dd_lsctl_operating_with_set_019A3", "content.dd_lsctl_operating_with_set_0D253" ] }, { "dlentry.dlentry_lsctl_operating_with_set_0A4FD": [ "content.dt_lsctl_operating_with_set_07D62", "content.dd_lsctl_operating_with_set_0F192", "content.dd_lsctl_operating_with_set_09060", "content.dd_lsctl_operating_with_set_00A4B" ] }, { "dlentry.dlentry_lsctl_operating_with_set_07BFE": [ "content.dt_lsctl_operating_with_set_09FEF", "content.dd_lsctl_operating_with_set_090CE", "content.dd_lsctl_operating_with_set_09C92" ] }, { "dlentry.dlentry_lsctl_operating_with_set_0E58D": [ "content.dt_lsctl_operating_with_set_037AE", "content.dd_lsctl_operating_with_set_079AD", "content.dd_lsctl_operating_with_set_06CBB", "content.dd_lsctl_operating_with_set_01BC0", "content.note_lsctl_operating_with_set_072F3" ] } ] }, "content.title_lsctl_operating_with_set_0F624", "content.p_lsctl_operating_with_set_0BC9B", "content.p_lsctl_operating_with_set_02297", "content.p_lsctl_operating_with_set_02E30", "content.p_lsctl_operating_with_set_055CE", "content.p_lsctl_operating_with_set_0183D", "content.p_lsctl_operating_with_set_0DC70", "content.p_lsctl_operating_with_set_082BC", "content.p_lsctl_operating_with_set_0F805", "content.p_lsctl_operating_with_set_0D77E" ], "related": [ "loading_product_settings_from_file-latest-en" ] }, "lsctl_input_output_formats-latest-en.json": { "title": "title_lsctl_input_output_forma_02F26", "title_lsctl_input_output_forma_02F26": "Input and output formats", "shortdesc": "shortdesc_lsctl_input_output_forma_0E364", "shortdesc_lsctl_input_output_forma_0E364": "The format defines how the setting values that you provide are interpreted and how lsctl prints the setting values in its output. ", "content.p_lsctl_input_output_forma_01874": "An input format defines how the entered setting values should be formatted. The input format affects all sources of inputs. This means that it does not matter if the setting value is entered using command line arguments or if it is read from a file (by using the --file switch); all input must follow the same formatting rules.", "content.p_lsctl_input_output_forma_0F56C": "An output format defines how setting values are formatted when lsctl prints them.", "content.p_lsctl_input_output_forma_0B5B2": "lsctl currently supports two formats: json and raw. You can select these using the --json (-j) and --raw (-r) flags respectively. By default, lsctl currently uses the raw format, but this is subject to change. If you depend on the exact input or output format of lsctl, always specify the desired format explicitly by using these flags.", "content.title_lsctl_input_output_forma_0B9BE": "JSON", "content.p_lsctl_input_output_forma_01971": "When you specify the --json flag, lsctl expects the input to be valid JSON and outputs valid JSON. For example:", "content.p_lsctl_input_output_forma_02D11": "lsctl set --json http_proxy host '\"example.com\"'", "content.p_lsctl_input_output_forma_0C77F": "Note the need for double quotes. JSON strings are always enclosed in double quotes (\"). However, because of the way shell handles word splitting, you need to enclose the JSON string within an additional pair of single quotes to prevent shell from removing the quotes from the value. As this is something specific to the way shell handles command line arguments, you do not need this when the value is read from a file (by using the --file switch) or received from an interactive editor (the --prompt flag).", "content.p_lsctl_input_output_forma_0F950": "Format flags also affect the output format. For example:", "content.p_lsctl_input_output_forma_0D2E0": "lsctl get --json http_proxy host", "content.p_lsctl_input_output_forma_0C374": "\"example.com\"", "content.p_lsctl_input_output_forma_08894": "Note that the output is a valid JSON string literal.", "content.title_lsctl_input_output_forma_0F3A1": "Raw", "content.p_lsctl_input_output_forma_0481A": "When you specify the --raw flag, lsctl uses the raw format. The raw format modifies the JSON format slightly to make certain operations more ergonomic for command line users. The differences between json and raw formats are:", "step.step_lsctl_input_output_forma_07E54": "Text values for settings do not need to be enclosed in double quotes. This means that the following command is valid: lsctl set http_proxy host example.com", "step.step_lsctl_input_output_forma_01CF8": "Boolean values for settings support additional literals (yes, y, no and n) in addition to true and false. This makes the following command valid: lsctl set http_proxy enabled yes", "content.p_lsctl_input_output_forma_076AC": "Note that these additions only apply when you are operating directly with text or boolean value settings. They are not applied when these settings appear as a part of other settings. Therefore, the following command is not valid:", "content.p_lsctl_input_output_forma_0E65C": "lsctl set http proxy '{\"enabled\": yes, \"host\": example.com, \"port\": 9090}'", "desc": [ "content.p_lsctl_input_output_forma_01874", "content.p_lsctl_input_output_forma_0F56C", "content.p_lsctl_input_output_forma_0B5B2", "content.title_lsctl_input_output_forma_0B9BE", "content.p_lsctl_input_output_forma_01971", "content.p_lsctl_input_output_forma_02D11", "content.p_lsctl_input_output_forma_0C77F", "content.p_lsctl_input_output_forma_0F950", "content.p_lsctl_input_output_forma_0D2E0", "content.p_lsctl_input_output_forma_0C374", "content.p_lsctl_input_output_forma_08894", "content.title_lsctl_input_output_forma_0F3A1", "content.p_lsctl_input_output_forma_0481A", { "steps.ul_lsctl_input_output_forma_08763": [ "step.step_lsctl_input_output_forma_07E54", "step.step_lsctl_input_output_forma_01CF8" ] }, "content.p_lsctl_input_output_forma_076AC", "content.p_lsctl_input_output_forma_0E65C" ] }, "lsctl_working_with_arrays-latest-en.json": { "title": "title_lsctl_working_with_array_094FE", "title_lsctl_working_with_array_094FE": "Working with arrays", "shortdesc": "shortdesc_lsctl_working_with_array_02EE7", "shortdesc_lsctl_working_with_array_02EE7": "Arrays differ from other settings in that they can contain a variable number of member settings. ", "content.p_lsctl_working_with_array_0CE51": "You can add members to and remove them from arrays using the add and delete sub-commands.", "content.p_lsctl_working_with_array_0B9AF": "For example, you can add a new directory to include in on-access scanning by adding a new member to the oas include_paths setting, which is an array setting that contains string members:", "content.p_lsctl_working_with_array_0ECD8": "lsctl add oas include_paths /home", "content.p_lsctl_working_with_array_0DBA4": "The lsctl add command adds the /home directory to the array.", "content.p_lsctl_working_with_array_0A84C": "To remove the newly added directory from include_paths, use the following command:", "content.p_lsctl_working_with_array_0B16F": "lsctl del oas include_paths /home", "content.p_lsctl_working_with_array_035CD": "Arrays can also include more complex settings are also possible. For example, integrity checker profiles are stored in the ic profiles array. Each integrity checker profile is an object that defines the profile properties. To add a new integrity checker profile, you could use the following command:", "content.p_lsctl_working_with_array_077BA": "lsctl add --file - ic profiles <<EOF
{
\"path\": \"/home\",
\"verify_attributes\": {
\"mode\": false,
\"user\": false,
\"group\": false,
\"size\": false,
\"mtime\": false
},
\"read_action\": \"deny\",
\"write_action\": \"allow\"
}
EOF", "content.note_lsctl_working_with_array_0F178": "Note: This example uses shell's here document syntax to make it easier to enter multi-line values.", "content.p_lsctl_working_with_array_00324": "Note the use of the --file switch with the - argument to indicate that the value should be read from the standard input. Alternatively, you could use the --prompt flag to make entering large input values easier.", "content.p_lsctl_working_with_array_0B46B": "To delete the newly added profile, use the following command:", "content.p_lsctl_working_with_array_09FAC": "lsctl del ic profiles /home", "content.p_lsctl_working_with_array_04D47": "Here the path member is the key that is used to identify members within the profiles array. How an array's elements are identified is specific to each array.", "content.p_lsctl_working_with_array_0E832": "You can also access settings within arrays using the usual sub-commands. For example, you could retrieve the value of the write_action setting inside the newly added profile:", "content.p_lsctl_working_with_array_02D46": "lsctl get ic profiles /home write_action", "content.p_lsctl_working_with_array_0FA6E": "allow", "content.p_lsctl_working_with_array_0FD05": "Or you could change the value of the mode setting within verify_attributes:", "content.p_lsctl_working_with_array_0FD53": "lsctl set ic profiles /home verify_attributes mode yes", "content.p_lsctl_working_with_array_03AF8": "In addition to affecting the way that setting values are handled, input and output formats also affect how you enter array keys. For example, if you want to retrieve the value of write_action settings when using the JSON format, you would have to enter the lsctl command like this:", "content.p_lsctl_working_with_array_0C55B": "lsctl get --json ic profiles '\"/home\"' write_action", "content.p_lsctl_working_with_array_09971": "\"allow\"", "desc": [ "content.p_lsctl_working_with_array_0CE51", "content.p_lsctl_working_with_array_0B9AF", "content.p_lsctl_working_with_array_0ECD8", "content.p_lsctl_working_with_array_0DBA4", "content.p_lsctl_working_with_array_0A84C", "content.p_lsctl_working_with_array_0B16F", "content.p_lsctl_working_with_array_035CD", "content.p_lsctl_working_with_array_077BA", "content.note_lsctl_working_with_array_0F178", "content.p_lsctl_working_with_array_00324", "content.p_lsctl_working_with_array_0B46B", "content.p_lsctl_working_with_array_09FAC", "content.p_lsctl_working_with_array_04D47", "content.p_lsctl_working_with_array_0E832", "content.p_lsctl_working_with_array_02D46", "content.p_lsctl_working_with_array_0FA6E", "content.p_lsctl_working_with_array_0FD05", "content.p_lsctl_working_with_array_0FD53", "content.p_lsctl_working_with_array_03AF8", "content.p_lsctl_working_with_array_0C55B", "content.p_lsctl_working_with_array_09971" ] }, "loading_product_settings_from_file-latest-en.json": { "title": "title_loading_product_settings_030B2", "title_loading_product_settings_030B2": "Loading product settings from a file", "shortdesc": "shortdesc_loading_product_settings_0AC96", "shortdesc_loading_product_settings_0AC96": "You can use the lsctl load command to restore settings from a JSON file saved earlier. ", "content.p_loading_product_settings_0C16D": "Before you begin, make sure you have a JSON backup file created earlier, for example with lsctl get --json > [PATH] (or the equivalent atlantctl command).", "content.p_loading_product_settings_06BC9": "This allows you to save your tested, functioning product configuration as a backup and then restore it if necessary. To save the current product configuration, you could use the following command, for example:", "content.p_loading_product_settings_0AEE0": "lsctl get --json > [PATH]", "content.p_loading_product_settings_092D6": "For this command, replace [PATH] with the full path and filename for the JSON backup file.", "content.p_loading_product_settings_086AC": "lsctl load --json --file [PATH]", "content.p_loading_product_settings_0C517": "This applies all the settings that are available in the backup file specified as [PATH] to your product configuration. Any settings that are missing are reset to their default value.", "step.step_loading_product_settings_08ADC": "To restore the product settings, run the following command:", "desc": [ "content.p_loading_product_settings_0C16D", "content.p_loading_product_settings_06BC9", "content.p_loading_product_settings_0AEE0", "content.p_loading_product_settings_092D6", { "steps.steps_loading_product_settings_0E576": [ "step.step_loading_product_settings_08ADC", "content.p_loading_product_settings_086AC", "content.p_loading_product_settings_0C517" ] } ] }, "inspecting_product_state-latest-en.json": { "title": "title_inspecting_product_state_07267", "title_inspecting_product_state_07267": "Inspecting the state of the product", "shortdesc": "shortdesc_inspecting_product_state_0FC18", "shortdesc_inspecting_product_state_0FC18": "You can use the lsctl command-line utility to inspect the state of the product and to view various scanning and performance statistics with the status sub-command. ", "content.title_inspecting_product_state_011F0": "Available status values", "content.p_inspecting_product_state_0F937": "Inspecting different status values works similarly to inspecting setting values:", "choice.choice_inspecting_product_state_0A400": "To get a status value, run lsctl status get [--json | --raw] STATUS...", "choice.choice_inspecting_product_state_0CCC9": "To see the help for a status, run lsctl status help [--json | --raw] STATUS...", "content.p_inspecting_product_state_0EDF4": "", "content.dt_inspecting_product_state_08535": "scan_service ", "content.dd_inspecting_product_state_0E5E9": "Type: JSON object
", "content.dd_inspecting_product_state_0BF2C": "All statistics related to the scanning service.", "content.dt_inspecting_product_state_0448E": "scan_service connection_count ", "content.dd_inspecting_product_state_09921": "Type: integer
", "content.dd_inspecting_product_state_0B7C9": "The number of connected hosts.", "content.dt_inspecting_product_state_07AE1": "scan_service last_detection ", "content.dd_inspecting_product_state_04578": "Type: string
", "content.dd_inspecting_product_state_0E8AB": "The name of the last detection.", "content.dt_inspecting_product_state_0161C": "scan_service max_connection_count ", "content.dd_inspecting_product_state_0A809": "Type: JSON object
", "content.dd_inspecting_product_state_079FF": "All statistics related to the maximum number of connected hosts.", "content.dt_inspecting_product_state_064F8": "scan_service max_connection_count daily ", "content.dd_inspecting_product_state_0E05B": "Type: integer
", "content.dd_inspecting_product_state_0D71B": "The maximum number of connected hosts in the last 24 hours.", "content.dt_inspecting_product_state_09721": "scan_service max_connection_count weekly ", "content.dd_inspecting_product_state_088F5": "Type: integer
", "content.dd_inspecting_product_state_01C34": "The maximum number of connected hosts in the last week.", "content.dt_inspecting_product_state_018C7": "scan_service max_connection_count monthly ", "content.dd_inspecting_product_state_015F0": "Type: integer
", "content.dd_inspecting_product_state_0665C": "The maximum number of connected hosts in the last month.", "content.dt_inspecting_product_state_0E2D6": "scan_service transaction_count ", "content.dd_inspecting_product_state_0B69C": "Type: JSON object
", "content.dd_inspecting_product_state_0F551": "All statistics related to the scanning transaction figures.", "content.dt_inspecting_product_state_03B3E": "scan_service transaction_count total ", "content.dd_inspecting_product_state_0347D": "Type: integer
", "content.dd_inspecting_product_state_0C982": "The total number of transactions.", "content.dt_inspecting_product_state_083DE": "scan_service transaction_count daily ", "content.dd_inspecting_product_state_04030": "Type: integer
", "content.dd_inspecting_product_state_0A1CE": "The number of transactions in the last 24 hours.", "content.dt_inspecting_product_state_03AF2": "scan_service transaction_count weekly ", "content.dd_inspecting_product_state_056F3": "Type: integer
", "content.dd_inspecting_product_state_0E15C": "The number of transactions in the last week.", "content.dt_inspecting_product_state_0FCA6": "scan_service transaction_count monthly ", "content.dd_inspecting_product_state_01F78": "Type: integer
", "content.dd_inspecting_product_state_088FD": "The number of transactions in the last month.", "content.dt_inspecting_product_state_0BE88": "scan_service detection_count ", "content.dd_inspecting_product_state_02146": "Type: JSON object
", "content.dd_inspecting_product_state_0EB1D": "All statistics related to the detection figures.", "content.dt_inspecting_product_state_0947B": "scan_service detection_count total ", "content.dd_inspecting_product_state_0122F": "Type: integer
", "content.dd_inspecting_product_state_008D7": "The number of detections.", "content.dt_inspecting_product_state_0968A": "scan_service detection_count daily ", "content.dd_inspecting_product_state_06D24": "Type: integer
", "content.dd_inspecting_product_state_05930": "The number of detections in the last 24 hours.", "content.dt_inspecting_product_state_09642": "scan_service detection_count weekly ", "content.dd_inspecting_product_state_05C8D": "Type: integer
", "content.dd_inspecting_product_state_05A57": "The number of detections in the last week.", "content.dt_inspecting_product_state_0EC45": "scan_service detection_count monthly ", "content.dd_inspecting_product_state_0E404": "Type: integer
", "content.dd_inspecting_product_state_06267": "The number of detections in the last month.", "content.dt_inspecting_product_state_00F4F": "scan_service min_transaction_latency ", "content.dd_inspecting_product_state_01B85": "Type: JSON object
", "content.dd_inspecting_product_state_03726": "All statistics related to the minimum latency in scanning transactions.", "content.dt_inspecting_product_state_07B74": "scan_service min_transaction_latency daily ", "content.dd_inspecting_product_state_0D8BB": "Type: integer
", "content.dd_inspecting_product_state_06B23": "The minimum transaction latency (milliseconds) in the last 24 hours.", "content.dt_inspecting_product_state_0B0D9": "scan_service min_transaction_latency weekly ", "content.dd_inspecting_product_state_01471": "Type: integer
", "content.dd_inspecting_product_state_0C268": "The minimum transaction latency (milliseconds) in the last week.", "content.dt_inspecting_product_state_0D243": "scan_service min_transaction_latency monthly ", "content.dd_inspecting_product_state_0ECEB": "Type: integer
", "content.dd_inspecting_product_state_0EF2B": "The minimum transaction latency (milliseconds) in the last month.", "content.dt_inspecting_product_state_03FE7": "scan_service max_transaction_latency ", "content.dd_inspecting_product_state_027AA": "Type: JSON object
", "content.dd_inspecting_product_state_0B87F": "All statistics related to the maximum latency in scanning transactions.", "content.dt_inspecting_product_state_0D630": "scan_service max_transaction_latency daily ", "content.dd_inspecting_product_state_03594": "Type: integer
", "content.dd_inspecting_product_state_0361B": "The maximum transaction latency (milliseconds) in the last 24 hours.", "content.dt_inspecting_product_state_07909": "scan_service max_transaction_latency weekly ", "content.dd_inspecting_product_state_01BFC": "Type: integer
", "content.dd_inspecting_product_state_0D048": "The maximum transaction latency (milliseconds) in the last week.", "content.dt_inspecting_product_state_067A9": "scan_service max_transaction_latency monthly ", "content.dd_inspecting_product_state_0A7F5": "Type: integer
", "content.dd_inspecting_product_state_0C38E": "The maximum transaction latency (milliseconds) in the last month.", "content.dt_inspecting_product_state_05431": "scan_service avg_transaction_latency ", "content.dd_inspecting_product_state_09098": "Type: JSON object
", "content.dd_inspecting_product_state_01B33": "All statistics related to the average latency in scanning transactions.", "content.dt_inspecting_product_state_0BA76": "scan_service avg_transaction_latency daily ", "content.dd_inspecting_product_state_08F00": "Type: integer
", "content.dd_inspecting_product_state_044CD": "The average transaction latency (milliseconds) in the last 24 hours.", "content.dt_inspecting_product_state_0812B": "scan_service avg_transaction_latency weekly ", "content.dd_inspecting_product_state_055E6": "Type: integer
", "content.dd_inspecting_product_state_09018": "The average transaction latency (milliseconds) in the last week.", "content.dt_inspecting_product_state_0BA41": "scan_service avg_transaction_latency monthly ", "content.dd_inspecting_product_state_0B871": "Type: integer
", "content.dd_inspecting_product_state_01213": "The average transaction latency (milliseconds) in the last month.", "content.dt_inspecting_product_state_06F6A": "product_version ", "content.dd_inspecting_product_state_048D6": "Type: JSON object
", "content.dd_inspecting_product_state_00522": "All information related to the product version.", "content.dt_inspecting_product_state_05CC4": "product_version name ", "content.dd_inspecting_product_state_0FEFB": "Type: string
", "content.dd_inspecting_product_state_0F7E1": "The name of the pinned product version. This can be an empty string if no pinned product version has been specified.", "content.note_inspecting_product_state_04EC7": "Note: If you use a pinned version of the product, it works for one year from the date when the new pinnable product version is released. You should update the product to the new version during that time.
", "content.dt_inspecting_product_state_01758": "product_version status ", "content.dd_inspecting_product_state_028C2": "Type: string
", "content.dd_inspecting_product_state_026DB": "A string representing the status of the pinned product version. The value can be unset, error, in-progress, or applied.", "desc": [ "content.title_inspecting_product_state_011F0", "content.p_inspecting_product_state_0F937", { "choices.ul_inspecting_product_state_0EF6F": [ "choice.choice_inspecting_product_state_0A400", "choice.choice_inspecting_product_state_0CCC9" ] }, { "dl.dl_inspecting_product_state_006C1": [ { "dlentry.dlentry_inspecting_product_state_03199": [ "content.dt_inspecting_product_state_08535", "content.dd_inspecting_product_state_0E5E9", "content.dd_inspecting_product_state_0BF2C" ] }, { "dlentry.dlentry_inspecting_product_state_0F5D7": [ "content.dt_inspecting_product_state_0448E", "content.dd_inspecting_product_state_09921", "content.dd_inspecting_product_state_0B7C9" ] }, { "dlentry.dlentry_inspecting_product_state_04CC2": [ "content.dt_inspecting_product_state_07AE1", "content.dd_inspecting_product_state_04578", "content.dd_inspecting_product_state_0E8AB" ] }, { "dlentry.dlentry_inspecting_product_state_0BB74": [ "content.dt_inspecting_product_state_0161C", "content.dd_inspecting_product_state_0A809", "content.dd_inspecting_product_state_079FF" ] }, { "dlentry.dlentry_inspecting_product_state_03FBB": [ "content.dt_inspecting_product_state_064F8", "content.dd_inspecting_product_state_0E05B", "content.dd_inspecting_product_state_0D71B" ] }, { "dlentry.dlentry_inspecting_product_state_002ED": [ "content.dt_inspecting_product_state_09721", "content.dd_inspecting_product_state_088F5", "content.dd_inspecting_product_state_01C34" ] }, { "dlentry.dlentry_inspecting_product_state_0C772": [ "content.dt_inspecting_product_state_018C7", "content.dd_inspecting_product_state_015F0", "content.dd_inspecting_product_state_0665C" ] }, { "dlentry.dlentry_inspecting_product_state_0F5C9": [ "content.dt_inspecting_product_state_0E2D6", "content.dd_inspecting_product_state_0B69C", "content.dd_inspecting_product_state_0F551" ] }, { "dlentry.dlentry_inspecting_product_state_02E41": [ "content.dt_inspecting_product_state_03B3E", "content.dd_inspecting_product_state_0347D", "content.dd_inspecting_product_state_0C982" ] }, { "dlentry.dlentry_inspecting_product_state_0E72A": [ "content.dt_inspecting_product_state_083DE", "content.dd_inspecting_product_state_04030", "content.dd_inspecting_product_state_0A1CE" ] }, { "dlentry.dlentry_inspecting_product_state_0FC3C": [ "content.dt_inspecting_product_state_03AF2", "content.dd_inspecting_product_state_056F3", "content.dd_inspecting_product_state_0E15C" ] }, { "dlentry.dlentry_inspecting_product_state_093CD": [ "content.dt_inspecting_product_state_0FCA6", "content.dd_inspecting_product_state_01F78", "content.dd_inspecting_product_state_088FD" ] }, { "dlentry.dlentry_inspecting_product_state_079BE": [ "content.dt_inspecting_product_state_0BE88", "content.dd_inspecting_product_state_02146", "content.dd_inspecting_product_state_0EB1D" ] }, { "dlentry.dlentry_inspecting_product_state_045EE": [ "content.dt_inspecting_product_state_0947B", "content.dd_inspecting_product_state_0122F", "content.dd_inspecting_product_state_008D7" ] }, { "dlentry.dlentry_inspecting_product_state_0AD0E": [ "content.dt_inspecting_product_state_0968A", "content.dd_inspecting_product_state_06D24", "content.dd_inspecting_product_state_05930" ] }, { "dlentry.dlentry_inspecting_product_state_0A984": [ "content.dt_inspecting_product_state_09642", "content.dd_inspecting_product_state_05C8D", "content.dd_inspecting_product_state_05A57" ] }, { "dlentry.dlentry_inspecting_product_state_05B15": [ "content.dt_inspecting_product_state_0EC45", "content.dd_inspecting_product_state_0E404", "content.dd_inspecting_product_state_06267" ] }, { "dlentry.dlentry_inspecting_product_state_03AA3": [ "content.dt_inspecting_product_state_00F4F", "content.dd_inspecting_product_state_01B85", "content.dd_inspecting_product_state_03726" ] }, { "dlentry.dlentry_inspecting_product_state_0A604": [ "content.dt_inspecting_product_state_07B74", "content.dd_inspecting_product_state_0D8BB", "content.dd_inspecting_product_state_06B23" ] }, { "dlentry.dlentry_inspecting_product_state_0811B": [ "content.dt_inspecting_product_state_0B0D9", "content.dd_inspecting_product_state_01471", "content.dd_inspecting_product_state_0C268" ] }, { "dlentry.dlentry_inspecting_product_state_0F04A": [ "content.dt_inspecting_product_state_0D243", "content.dd_inspecting_product_state_0ECEB", "content.dd_inspecting_product_state_0EF2B" ] }, { "dlentry.dlentry_inspecting_product_state_08278": [ "content.dt_inspecting_product_state_03FE7", "content.dd_inspecting_product_state_027AA", "content.dd_inspecting_product_state_0B87F" ] }, { "dlentry.dlentry_inspecting_product_state_00EBF": [ "content.dt_inspecting_product_state_0D630", "content.dd_inspecting_product_state_03594", "content.dd_inspecting_product_state_0361B" ] }, { "dlentry.dlentry_inspecting_product_state_06876": [ "content.dt_inspecting_product_state_07909", "content.dd_inspecting_product_state_01BFC", "content.dd_inspecting_product_state_0D048" ] }, { "dlentry.dlentry_inspecting_product_state_0682C": [ "content.dt_inspecting_product_state_067A9", "content.dd_inspecting_product_state_0A7F5", "content.dd_inspecting_product_state_0C38E" ] }, { "dlentry.dlentry_inspecting_product_state_0FC95": [ "content.dt_inspecting_product_state_05431", "content.dd_inspecting_product_state_09098", "content.dd_inspecting_product_state_01B33" ] }, { "dlentry.dlentry_inspecting_product_state_09A17": [ "content.dt_inspecting_product_state_0BA76", "content.dd_inspecting_product_state_08F00", "content.dd_inspecting_product_state_044CD" ] }, { "dlentry.dlentry_inspecting_product_state_0EDBB": [ "content.dt_inspecting_product_state_0812B", "content.dd_inspecting_product_state_055E6", "content.dd_inspecting_product_state_09018" ] }, { "dlentry.dlentry_inspecting_product_state_07C27": [ "content.dt_inspecting_product_state_0BA41", "content.dd_inspecting_product_state_0B871", "content.dd_inspecting_product_state_01213" ] }, { "dlentry.dlentry_inspecting_product_state_040F0": [ "content.dt_inspecting_product_state_06F6A", "content.dd_inspecting_product_state_048D6", "content.dd_inspecting_product_state_00522" ] }, { "dlentry.dlentry_inspecting_product_state_0200C": [ "content.dt_inspecting_product_state_05CC4", "content.dd_inspecting_product_state_0FEFB", "content.dd_inspecting_product_state_0F7E1", "content.note_inspecting_product_state_04EC7" ] }, { "dlentry.dlentry_inspecting_product_state_0C916": [ "content.dt_inspecting_product_state_01758", "content.dd_inspecting_product_state_028C2", "content.dd_inspecting_product_state_026DB" ] } ] } ] }, "settings_real_time_scanning-latest-en.json": { "title": "title_settings_real_time_scann_06971", "title_settings_real_time_scann_06971": "Command-line settings for real-time scanning", "shortdesc": "shortdesc_settings_real_time_scann_04724", "shortdesc_settings_real_time_scann_04724": "The settings related to real-time scanning that are available for lsctl. ", "content.title_settings_real_time_scann_0AECC": "Available settings", "content.p_settings_real_time_scann_041D8": "", "content.note_settings_real_time_scann_04ACF": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_settings_real_time_scann_0E6F1": "oas ", "content.pd_settings_real_time_scann_0133B": "Type: JSON object
", "content.pd_settings_real_time_scann_05339": "All settings related to real-time scanning.", "content.pt_settings_real_time_scann_0F9C2": "oas enabled ", "content.pd_settings_real_time_scann_07AD5": "Type: boolean
", "content.pd_settings_real_time_scann_0888D": "Controls whether real-time scanning is on or off.", "content.pt_settings_real_time_scann_0F90B": "oas include_paths ", "content.pd_settings_real_time_scann_01D6D": "Type: JSON array
", "content.pd_settings_real_time_scann_0035E": "The paths included in real-time scanning.", "content.pt_settings_real_time_scann_03387": "oas include_paths [PATH] ", "content.pd_settings_real_time_scann_0406D": "Type: string
", "content.pd_settings_real_time_scann_02A61": "A path included in real-time scanning. For use with add and del commands. [PATH] must be a full, absolute path name.", "content.dd_p_settings_real_time_scann_095C4": "You can use wildcards in paths, with ** matching any subdirectories.
", "content.pt_settings_real_time_scann_0BAB5": "oas exclude_paths ", "content.pd_settings_real_time_scann_01F44": "Type: JSON array
", "content.pd_settings_real_time_scann_0EAE2": "The paths excluded from real-time scanning.", "content.pt_settings_real_time_scann_025F3": "oas exclude_paths [PATH] ", "content.pd_settings_real_time_scann_0C017": "Type: string
", "content.pd_settings_real_time_scann_0CC8D": "A path excluded from real-time scanning. For use with add and del commands. [PATH] must be a full, absolute path name.", "content.dd_p_settings_real_time_scann_0F941": "You can use wildcards in paths, with ** matching any subdirectories.
", "content.pt_settings_real_time_scann_08481": "oas trusted_application_paths", "content.pd_settings_real_time_scann_0CA3E": "Type: JSON array
", "content.pd_settings_real_time_scann_069B6": "The paths to trusted applications whose file access events are excluded from real-time scanning.", "content.pt_settings_real_time_scann_0A9E2": "oas trusted_application_paths [PATH]", "content.pd_settings_real_time_scann_0BCE7": "Type: string
", "content.pd_settings_real_time_scann_0900D": "A path to the executable file of a trusted application whose file access events are excluded from real-time scanning. For use with add and del commands. [PATH] must be a full, absolute path name. The path is a prefix match: any file path that starts with this path matches. For example, if you set /opt/app/, then /opt/app/bin/myapp matches.", "content.dd_p_settings_real_time_scann_012F4": "You can use wildcards in paths, with ** matching any subdirectories.
", "content.note_settings_real_time_scann_0B031": "Note: Exclusions reduce scanning but do not guarantee complete bypass, especially for short-lived processes.
", "content.pt_settings_real_time_scann_0476A": "oas actions ", "content.pd_settings_real_time_scann_093D6": "Type: JSON object
", "content.pd_settings_real_time_scann_0AF09": "The actions configuration for real-time scanning.", "content.pt_settings_real_time_scann_044CF": "oas actions malware ", "content.pd_settings_real_time_scann_008A5": "Type: string
", "content.scanning_actions_malware": "The action on detecting files that are identified as malware. Allowed values are:", "choice.choice_settings_real_time_scann_0CC71": "remove - delete the file", "choice.choice_settings_real_time_scann_0916B": "rename - add a .malware extension to the file name", "choice.choice_settings_real_time_scann_050E6": "none - do not do anything to the file", "content.pt_settings_real_time_scann_037BF": "oas actions suspected ", "content.pd_settings_real_time_scann_05A69": "Type: string
", "content.scanning_actions_suspected": "The action on detecting files that are suspected to be unsafe. Allowed values are:", "choice.choice_settings_real_time_scann_0B911": "remove - delete the file", "choice.choice_settings_real_time_scann_06F08": "rename - add a .suspected extension to the file name", "choice.choice_settings_real_time_scann_02815": "none - do not do anything to the file", "content.pt_settings_real_time_scann_0BC4C": "oas detect_pua ", "content.pd_settings_real_time_scann_06648": "Type: boolean
", "content.scanning_detect_pua": "Controls whether scanning for potentially unwanted applications (PUA) is on or off.", "content.pt_settings_real_time_scann_06103": "oas actions pua ", "content.pd_settings_real_time_scann_0FFEC": "Type: string
", "content.scanning_actions_pua": "The action on detecting files that are identified as potentially unwanted applications. Allowed values are:", "choice.choice_settings_real_time_scann_01160": "remove - delete the file", "choice.choice_settings_real_time_scann_0E659": "rename - add a .pua extension to the file name", "choice.choice_settings_real_time_scann_0755B": "none - do not do anything to the file", "content.pt_settings_real_time_scann_0ABF0": "oas scan_archives ", "content.pd_settings_real_time_scann_0E4E3": "Type: boolean
", "content.scanning_scan_archives": "Controls whether scanning inside archive files is on or off.", "content.pt_settings_real_time_scann_0A1CC": "oas block_archive_max_nested ", "content.pd_settings_real_time_scann_09296": "Type: boolean
", "content.scanning_block_nested": "Controls whether or not archive files that are too deeply nested are considered unsafe.", "content.pt_settings_real_time_scann_0AA9D": "oas archive_max_nested ", "content.pd_settings_real_time_scann_0D29B": "Type: integer
", "content.pd_settings_real_time_scann_0900A": "The maximum allowed level of nesting for archive files. If oas block_archive_max_nested is set to true, archive files that exceed this level of nesting are considered unsafe.", "content.pt_settings_real_time_scann_0FBFB": "oas block_encrypted_archives ", "content.pd_settings_real_time_scann_067A2": "Type: boolean
", "content.scanning_block_encrypted": "Controls whether or not encrypted archive files are considered unsafe.", "content.pt_settings_real_time_scann_088B0": "oas scan_only_executables ", "content.pd_settings_real_time_scann_08F41": "Type: boolean
", "content.pd_settings_real_time_scann_007AC": "Controls whether or not scanning is restricted to files that have execute permissions.", "desc": [ "content.title_settings_real_time_scann_0AECC", "content.note_settings_real_time_scann_04ACF", { "parml.parml_settings_real_time_scann_0BB6D": [ { "plentry.plentry_settings_real_time_scann_001A5": [ "content.pt_settings_real_time_scann_0E6F1", "content.pd_settings_real_time_scann_0133B", "content.pd_settings_real_time_scann_05339" ] }, { "plentry.plentry_settings_real_time_scann_0CD64": [ "content.pt_settings_real_time_scann_0F9C2", "content.pd_settings_real_time_scann_07AD5", "content.pd_settings_real_time_scann_0888D" ] }, { "plentry.plentry_settings_real_time_scann_00DCB": [ "content.pt_settings_real_time_scann_0F90B", "content.pd_settings_real_time_scann_01D6D", "content.pd_settings_real_time_scann_0035E" ] }, { "plentry.plentry_settings_real_time_scann_00699": [ "content.pt_settings_real_time_scann_03387", "content.pd_settings_real_time_scann_0406D", "content.pd_settings_real_time_scann_02A61", "content.dd_p_settings_real_time_scann_095C4" ] }, { "plentry.plentry_settings_real_time_scann_06AC3": [ "content.pt_settings_real_time_scann_0BAB5", "content.pd_settings_real_time_scann_01F44", "content.pd_settings_real_time_scann_0EAE2" ] }, { "plentry.plentry_settings_real_time_scann_06AA2": [ "content.pt_settings_real_time_scann_025F3", "content.pd_settings_real_time_scann_0C017", "content.pd_settings_real_time_scann_0CC8D", "content.dd_p_settings_real_time_scann_0F941" ] }, { "plentry.plentry_settings_real_time_scann_0C7F7": [ "content.pt_settings_real_time_scann_08481", "content.pd_settings_real_time_scann_0CA3E", "content.pd_settings_real_time_scann_069B6" ] }, { "plentry.plentry_settings_real_time_scann_0F856": [ "content.pt_settings_real_time_scann_0A9E2", "content.pd_settings_real_time_scann_0BCE7", "content.pd_settings_real_time_scann_0900D", "content.dd_p_settings_real_time_scann_012F4", "content.note_settings_real_time_scann_0B031" ] }, { "plentry.plentry_settings_real_time_scann_0F4DB": [ "content.pt_settings_real_time_scann_0476A", "content.pd_settings_real_time_scann_093D6", "content.pd_settings_real_time_scann_0AF09" ] }, { "plentry.plentry_settings_real_time_scann_0BF13": [ "content.pt_settings_real_time_scann_044CF", "content.pd_settings_real_time_scann_008A5", "content.scanning_actions_malware", { "choices.ul_settings_real_time_scann_0B1B9": [ "choice.choice_settings_real_time_scann_0CC71", "choice.choice_settings_real_time_scann_0916B", "choice.choice_settings_real_time_scann_050E6" ] } ] }, { "plentry.plentry_settings_real_time_scann_0C5AA": [ "content.pt_settings_real_time_scann_037BF", "content.pd_settings_real_time_scann_05A69", "content.scanning_actions_suspected", { "choices.ul_settings_real_time_scann_0FC19": [ "choice.choice_settings_real_time_scann_0B911", "choice.choice_settings_real_time_scann_06F08", "choice.choice_settings_real_time_scann_02815" ] } ] }, { "plentry.plentry_settings_real_time_scann_01E04": [ "content.pt_settings_real_time_scann_0BC4C", "content.pd_settings_real_time_scann_06648", "content.scanning_detect_pua" ] }, { "plentry.plentry_settings_real_time_scann_04E1D": [ "content.pt_settings_real_time_scann_06103", "content.pd_settings_real_time_scann_0FFEC", "content.scanning_actions_pua", { "choices.ul_settings_real_time_scann_03849": [ "choice.choice_settings_real_time_scann_01160", "choice.choice_settings_real_time_scann_0E659", "choice.choice_settings_real_time_scann_0755B" ] } ] }, { "plentry.plentry_settings_real_time_scann_06A72": [ "content.pt_settings_real_time_scann_0ABF0", "content.pd_settings_real_time_scann_0E4E3", "content.scanning_scan_archives" ] }, { "plentry.plentry_settings_real_time_scann_0D976": [ "content.pt_settings_real_time_scann_0A1CC", "content.pd_settings_real_time_scann_09296", "content.scanning_block_nested" ] }, { "plentry.plentry_settings_real_time_scann_0F56B": [ "content.pt_settings_real_time_scann_0AA9D", "content.pd_settings_real_time_scann_0D29B", "content.pd_settings_real_time_scann_0900A" ] }, { "plentry.plentry_settings_real_time_scann_01DAB": [ "content.pt_settings_real_time_scann_0FBFB", "content.pd_settings_real_time_scann_067A2", "content.scanning_block_encrypted" ] }, { "plentry.plentry_settings_real_time_scann_08FEB": [ "content.pt_settings_real_time_scann_088B0", "content.pd_settings_real_time_scann_08F41", "content.pd_settings_real_time_scann_007AC" ] } ] } ] }, "settings_manual_scheduled_scanning-latest-en.json": { "title": "title_settings_manual_schedule_0AC1D", "title_settings_manual_schedule_0AC1D": "Settings for manual and scheduled scanning", "shortdesc": "shortdesc_settings_manual_schedule_0A9A2", "shortdesc_settings_manual_schedule_0A9A2": "The settings related to manual and scheduled scanning that are available for lsctl. ", "content.title_settings_manual_schedule_0BA2B": "Available settings", "content.p_settings_manual_schedule_0A67F": "", "content.note_settings_manual_schedule_09AB4": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_settings_manual_schedule_0D94F": "ods ", "content.pd_settings_manual_schedule_030A8": "Type: JSON object
", "content.pd_settings_manual_schedule_00FE5": "All settings related to manual and scheduled scanning.", "content.pt_settings_manual_schedule_0216F": "ods exclude_paths ", "content.pd_settings_manual_schedule_041A7": "Type: JSON array
", "content.pd_settings_manual_schedule_05DB9": "The paths excluded from scheduled scanning.", "content.pt_settings_manual_schedule_0CD9D": "ods exclude_paths [PATH] ", "content.pd_settings_manual_schedule_0B232": "Type: string
", "content.pd_settings_manual_schedule_07148": "A path excluded from scheduled scanning. For use with add and del commands. [PATH] must be a full, absolute path name.", "content.dd_p_settings_manual_schedule_0C444": "You can use wildcards in paths, with ** matching any subdirectories.
", "content.pt_settings_manual_schedule_0F1D5": "ods actions ", "content.pd_settings_manual_schedule_08596": "Type: JSON object
", "content.pd_settings_manual_schedule_02C14": "The actions configuration for manual and scheduled scanning.", "content.pt_settings_manual_schedule_0A4AF": "ods actions malware ", "content.pd_settings_manual_schedule_0F347": "Type: string
", "content.pd_settings_manual_schedule_07370": "The action on detecting files that are identified as malware. Allowed values are:", "choice.choice_settings_manual_schedule_0E083": "remove - delete the file", "choice.choice_settings_manual_schedule_06BB4": "rename - add a .malware extension to the file name", "choice.choice_settings_manual_schedule_020A5": "none - do not do anything to the file", "content.pt_settings_manual_schedule_06574": "ods actions suspected ", "content.pd_settings_manual_schedule_07D52": "Type: string
", "content.pd_settings_manual_schedule_0F847": "The action on detecting files that are suspected to be unsafe. Allowed values are:", "choice.choice_settings_manual_schedule_09462": "remove - delete the file", "choice.choice_settings_manual_schedule_05E29": "rename - add a .suspected extension to the file name", "choice.choice_settings_manual_schedule_03797": "none - do not do anything to the file", "content.pt_settings_manual_schedule_01852": "ods detect_pua ", "content.pd_settings_manual_schedule_05C23": "Type: boolean
", "content.pd_settings_manual_schedule_0E5A0": "Controls whether scanning for potentially unwanted applications (PUA) is on or off.", "content.pt_settings_manual_schedule_044AC": "ods actions pua ", "content.pd_settings_manual_schedule_0BF52": "Type: string
", "content.pd_settings_manual_schedule_0FCD1": "The action on detecting files that are identified as potentially unwanted applications. Allowed values are:", "choice.choice_settings_manual_schedule_043C3": "remove - delete the file", "choice.choice_settings_manual_schedule_01555": "rename - add a .pua extension to the file name", "choice.choice_settings_manual_schedule_09CB6": "none - do not do anything to the file", "content.pt_settings_manual_schedule_0B224": "ods scan_archives ", "content.pd_settings_manual_schedule_0F9C2": "Type: boolean
", "content.pd_settings_manual_schedule_0B807": "Controls whether scanning inside archive files is on or off.", "content.pt_settings_manual_schedule_0E1BD": "ods block_archive_max_nested ", "content.pd_settings_manual_schedule_04E7D": "Type: boolean
", "content.pd_settings_manual_schedule_09033": "Controls whether or not archive files that are too deeply nested are considered unsafe.", "content.pt_settings_manual_schedule_0E823": "ods archive_max_nested ", "content.pd_settings_manual_schedule_03B72": "Type: integer
", "content.pd_settings_manual_schedule_0F941": "The maximum allowed level of nesting for archive files. If ods block_archive_max_nested is set to true, archive files that exceed this level of nesting are considered unsafe.", "content.pt_settings_manual_schedule_02DDD": "ods block_encrypted_archives ", "content.pd_settings_manual_schedule_0BAC3": "Type: boolean
", "content.pd_settings_manual_schedule_019B9": "Controls whether or not encrypted archive files are considered unsafe.", "content.pt_settings_manual_schedule_02D81": "ods schedule ", "content.pd_settings_manual_schedule_0B5CD": "Type: JSON object
", "content.pd_settings_manual_schedule_03BE8": "All settings related to scheduled scanning.", "content.pt_settings_manual_schedule_0D730": "ods schedule schedule_type ", "content.pd_settings_manual_schedule_0AF17": "Type: string
", "content.pd_settings_manual_schedule_0F5A6": "Type of scheduled scanning in use. Currently the only allowed value is weekly.", "content.pt_settings_manual_schedule_04903": "ods schedule weekly_schedule ", "content.pd_settings_manual_schedule_0F1E3": "Type: JSON object
", "content.pd_settings_manual_schedule_09EB6": "Settings for scanning on a weekly schedule.", "content.pt_settings_manual_schedule_02A81": "ods schedule weekly_schedule [monday|tuesday|wednesday|thursday|friday|saturday|sunday] ", "content.pd_settings_manual_schedule_0AFAE": "Type: boolean
", "content.pd_settings_manual_schedule_0174E": "This group of settings controls if the scheduled scan is run on the given weekday.", "content.pt_settings_manual_schedule_0592A": "ods schedule weekly_schedule time_of_day ", "content.pd_settings_manual_schedule_0D901": "Type: string
", "content.pd_settings_manual_schedule_09271": "The time to start a scheduled scan on the set days. The value is a 24-hour time value (HH:MM) in the endpoint's time zone.", "desc": [ "content.title_settings_manual_schedule_0BA2B", "content.note_settings_manual_schedule_09AB4", { "parml.parml_settings_manual_schedule_0D17A": [ { "plentry.plentry_settings_manual_schedule_051C2": [ "content.pt_settings_manual_schedule_0D94F", "content.pd_settings_manual_schedule_030A8", "content.pd_settings_manual_schedule_00FE5" ] }, { "plentry.plentry_settings_manual_schedule_07930": [ "content.pt_settings_manual_schedule_0216F", "content.pd_settings_manual_schedule_041A7", "content.pd_settings_manual_schedule_05DB9" ] }, { "plentry.plentry_settings_manual_schedule_01755": [ "content.pt_settings_manual_schedule_0CD9D", "content.pd_settings_manual_schedule_0B232", "content.pd_settings_manual_schedule_07148", "content.dd_p_settings_manual_schedule_0C444" ] }, { "plentry.plentry_settings_manual_schedule_09C9B": [ "content.pt_settings_manual_schedule_0F1D5", "content.pd_settings_manual_schedule_08596", "content.pd_settings_manual_schedule_02C14" ] }, { "plentry.plentry_settings_manual_schedule_0E93B": [ "content.pt_settings_manual_schedule_0A4AF", "content.pd_settings_manual_schedule_0F347", "content.pd_settings_manual_schedule_07370", { "choices.ul_settings_manual_schedule_0FB42": [ "choice.choice_settings_manual_schedule_0E083", "choice.choice_settings_manual_schedule_06BB4", "choice.choice_settings_manual_schedule_020A5" ] } ] }, { "plentry.plentry_settings_manual_schedule_0D18F": [ "content.pt_settings_manual_schedule_06574", "content.pd_settings_manual_schedule_07D52", "content.pd_settings_manual_schedule_0F847", { "choices.ul_settings_manual_schedule_0A9DB": [ "choice.choice_settings_manual_schedule_09462", "choice.choice_settings_manual_schedule_05E29", "choice.choice_settings_manual_schedule_03797" ] } ] }, { "plentry.plentry_settings_manual_schedule_051FB": [ "content.pt_settings_manual_schedule_01852", "content.pd_settings_manual_schedule_05C23", "content.pd_settings_manual_schedule_0E5A0" ] }, { "plentry.plentry_settings_manual_schedule_023A8": [ "content.pt_settings_manual_schedule_044AC", "content.pd_settings_manual_schedule_0BF52", "content.pd_settings_manual_schedule_0FCD1", { "choices.ul_settings_manual_schedule_00D9A": [ "choice.choice_settings_manual_schedule_043C3", "choice.choice_settings_manual_schedule_01555", "choice.choice_settings_manual_schedule_09CB6" ] } ] }, { "plentry.plentry_settings_manual_schedule_0816F": [ "content.pt_settings_manual_schedule_0B224", "content.pd_settings_manual_schedule_0F9C2", "content.pd_settings_manual_schedule_0B807" ] }, { "plentry.plentry_settings_manual_schedule_011EA": [ "content.pt_settings_manual_schedule_0E1BD", "content.pd_settings_manual_schedule_04E7D", "content.pd_settings_manual_schedule_09033" ] }, { "plentry.plentry_settings_manual_schedule_08EB8": [ "content.pt_settings_manual_schedule_0E823", "content.pd_settings_manual_schedule_03B72", "content.pd_settings_manual_schedule_0F941" ] }, { "plentry.plentry_settings_manual_schedule_046B9": [ "content.pt_settings_manual_schedule_02DDD", "content.pd_settings_manual_schedule_0BAC3", "content.pd_settings_manual_schedule_019B9" ] }, { "plentry.plentry_settings_manual_schedule_00126": [ "content.pt_settings_manual_schedule_02D81", "content.pd_settings_manual_schedule_0B5CD", "content.pd_settings_manual_schedule_03BE8" ] }, { "plentry.plentry_settings_manual_schedule_0FA2F": [ "content.pt_settings_manual_schedule_0D730", "content.pd_settings_manual_schedule_0AF17", "content.pd_settings_manual_schedule_0F5A6" ] }, { "plentry.plentry_settings_manual_schedule_091A9": [ "content.pt_settings_manual_schedule_04903", "content.pd_settings_manual_schedule_0F1E3", "content.pd_settings_manual_schedule_09EB6" ] }, { "plentry.plentry_settings_manual_schedule_02AB5": [ "content.pt_settings_manual_schedule_02A81", "content.pd_settings_manual_schedule_0AFAE", "content.pd_settings_manual_schedule_0174E" ] }, { "plentry.plentry_settings_manual_schedule_0C174": [ "content.pt_settings_manual_schedule_0592A", "content.pd_settings_manual_schedule_0D901", "content.pd_settings_manual_schedule_09271" ] } ] } ] }, "orsp_settings-latest-en.json": { "title": "title_orsp_settings_000001_002160AF", "title_orsp_settings_000001_002160AF": "ORSP settings", "shortdesc": "shortdesc_orsp_settings_000002_C5708872", "shortdesc_orsp_settings_000002_C5708872": "The settings related to the Object Reputation Services Platform (ORSP) that are available for lsctl. ", "content.p_orsp_settings_00000F_C91F70C3": "", "content.note_orsp_settings_000010_228C01CA": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_orsp_settings_000014_D2B104AD": "orsp ", "content.pd_orsp_settings_000015_3315BD14": "Type: JSON object
", "content.pd_orsp_settings_000016_0976C1C7": "Settings related to using the cloud-based Object Reputation Services Platform (ORSP) in scanning.", "content.pt_orsp_settings_000018_E49276EF": "orsp enabled ", "content.pd_orsp_settings_000019_B382D553": "Type: boolean
", "content.pd_orsp_settings_00001A_E480B1E6": "Controls whether ORSP is switched on or off for file scanning.", "desc": [ "content.note_orsp_settings_000010_228C01CA", { "parml.parml_orsp_settings_000012_5307BF23": [ { "plentry.plentry_orsp_settings_000013_AC37493A": [ "content.pt_orsp_settings_000014_D2B104AD", "content.pd_orsp_settings_000015_3315BD14", "content.pd_orsp_settings_000016_0976C1C7" ] }, { "plentry.plentry_orsp_settings_000017_D6B608BA": [ "content.pt_orsp_settings_000018_E49276EF", "content.pd_orsp_settings_000019_B382D553", "content.pd_orsp_settings_00001A_E480B1E6" ] } ] } ] }, "settings_integrity_checking-latest-en.json": { "title": "title_settings_integrity_check_0FA41", "title_settings_integrity_check_0FA41": "Command-line settings for integrity checking", "shortdesc": "shortdesc_settings_integrity_check_0379F", "shortdesc_settings_integrity_check_0379F": "The settings related to integrity checking that are available for lsctl. ", "content.title_settings_integrity_check_0B67D": "Available settings", "content.p_settings_integrity_check_053C1": "", "content.note_settings_integrity_check_015D5": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_settings_integrity_check_05E5C": "ic ", "content.pd_settings_integrity_check_0F9D9": "Type: JSON object
", "content.pd_settings_integrity_check_029D8": "All settings related to integrity checking.", "content.pt_settings_integrity_check_0563B": "ic enabled ", "content.pd_settings_integrity_check_0B602": "Type: boolean
", "content.pd_settings_integrity_check_0829F": "Controls whether integrity checking is on or off.", "content.pt_settings_integrity_check_0DA6E": "ic profiles ", "content.pd_settings_integrity_check_07537": "Type: JSON array
", "content.pd_settings_integrity_check_0734F": "The baseline list of path names included in integrity checking.", "content.pt_settings_integrity_check_03753": "ic profiles [PATH] ", "content.pd_settings_integrity_check_0EDF7": "Type: JSON object
", "content.pd_settings_integrity_check_0AF1A": "All integrity checking settings for the given path.", "content.pt_settings_integrity_check_0C543": "ic profiles [PATH] path ", "content.pd_settings_integrity_check_032FF": "Type: string
", "content.pd_settings_integrity_check_00CC8": "A path name included in integrity checking.", "content.pt_settings_integrity_check_028DF": "ic profiles [PATH] verify_attributes ", "content.pd_settings_integrity_check_07740": "Type: JSON object
", "content.pd_settings_integrity_check_0BB1A": "All monitored attributes for the given path.", "content.pt_settings_integrity_check_0D60B": "ic profiles [PATH] verify_attributes [mode|user|group|size|mtime] ", "content.pd_settings_integrity_check_0F6E5": "Type: boolean
", "content.pd_settings_integrity_check_043EB": "This group of settings controls whether to monitor changes in the file mode, the owning user or group, size, or modification time of the given path.", "content.pt_settings_integrity_check_03800": "ic profiles [PATH] read_action ", "content.pd_settings_integrity_check_0BE16": "Type: string
", "content.pd_settings_integrity_check_07134": "The action on an attempt to read from the given path if its contents or monitored attributes have changed. The allowed values are allow and deny, which respectively permit or prevent access to the file.", "content.pt_settings_integrity_check_08755": "ic profiles [PATH] write_action ", "content.pd_settings_integrity_check_0AF44": "Type: string
", "content.pd_settings_integrity_check_07D14": "The action on an attempt to write to the given path. The allowed values are allow and deny, which respectively permit or prevent access to the file.", "content.pt_settings_integrity_check_032EB": "ic profiles [PATH] exclude_patterns ", "content.pd_settings_integrity_check_0DAE7": "Type: JSON array
", "content.pd_settings_integrity_check_0A6E2": "List of file name patterns to be excluded from integrity checking. For example, \"*.log\" pattern could be used to exclude all files with .log file extension from integrity checking.", "content.note_settings_integrity_check_0DE9F": "Note: You can use wildcards in file name patterns, but the path does not support them.
", "content.pt_settings_integrity_check_08391": "ic system_updates ", "content.pd_settings_integrity_check_05270": "Type: boolean
", "content.pd_settings_integrity_check_0D24F": "This group of settings controls whether baseline is automatically updated whenever packages are installed or upgraded with package managers.", "content.pt_settings_integrity_check_0CA39": "ic system_updates apt ", "content.pd_settings_integrity_check_00413": "Type: boolean
", "content.pd_settings_integrity_check_0C88B": "This group of settings is for the APT package management system.", "content.pt_settings_integrity_check_0BB60": "ic system_updates apt enabled ", "content.pd_settings_integrity_check_0FB68": "Type: boolean
", "content.pd_settings_integrity_check_0DD37": "When the apt integration is enabled, integrity checking updates the baseline automatically whenever packages are installed or upgraded with apt and its related tools like apt-get.", "content.pt_settings_integrity_check_01E20": "ic system_updates dnf ", "content.pd_settings_integrity_check_05CC6": "Type: boolean
", "content.pd_settings_integrity_check_0EAE5": "This group of settings is for the DNF package manager.", "content.pt_settings_integrity_check_01FBF": "ic system_updates dnf enabled ", "content.pd_settings_integrity_check_04BB4": "Type: boolean
", "content.pd_settings_integrity_check_0FF98": "When the dnf integration is enabled, integrity checking updates the baseline automatically whenever packages are installed or upgraded with the dnf package manager.", "desc": [ "content.title_settings_integrity_check_0B67D", "content.note_settings_integrity_check_015D5", { "parml.parml_settings_integrity_check_0AB9C": [ { "plentry.plentry_settings_integrity_check_05C65": [ "content.pt_settings_integrity_check_05E5C", "content.pd_settings_integrity_check_0F9D9", "content.pd_settings_integrity_check_029D8" ] }, { "plentry.plentry_settings_integrity_check_0CDC1": [ "content.pt_settings_integrity_check_0563B", "content.pd_settings_integrity_check_0B602", "content.pd_settings_integrity_check_0829F" ] }, { "plentry.plentry_settings_integrity_check_0A121": [ "content.pt_settings_integrity_check_0DA6E", "content.pd_settings_integrity_check_07537", "content.pd_settings_integrity_check_0734F" ] }, { "plentry.plentry_settings_integrity_check_0F922": [ "content.pt_settings_integrity_check_03753", "content.pd_settings_integrity_check_0EDF7", "content.pd_settings_integrity_check_0AF1A" ] }, { "plentry.plentry_settings_integrity_check_06D72": [ "content.pt_settings_integrity_check_0C543", "content.pd_settings_integrity_check_032FF", "content.pd_settings_integrity_check_00CC8" ] }, { "plentry.plentry_settings_integrity_check_060F3": [ "content.pt_settings_integrity_check_028DF", "content.pd_settings_integrity_check_07740", "content.pd_settings_integrity_check_0BB1A" ] }, { "plentry.plentry_settings_integrity_check_04443": [ "content.pt_settings_integrity_check_0D60B", "content.pd_settings_integrity_check_0F6E5", "content.pd_settings_integrity_check_043EB" ] }, { "plentry.plentry_settings_integrity_check_0304F": [ "content.pt_settings_integrity_check_03800", "content.pd_settings_integrity_check_0BE16", "content.pd_settings_integrity_check_07134" ] }, { "plentry.plentry_settings_integrity_check_01607": [ "content.pt_settings_integrity_check_08755", "content.pd_settings_integrity_check_0AF44", "content.pd_settings_integrity_check_07D14" ] }, { "plentry.plentry_settings_integrity_check_04F54": [ "content.pt_settings_integrity_check_032EB", "content.pd_settings_integrity_check_0DAE7", "content.pd_settings_integrity_check_0A6E2", "content.note_settings_integrity_check_0DE9F" ] }, { "plentry.plentry_settings_integrity_check_0428B": [ "content.pt_settings_integrity_check_08391", "content.pd_settings_integrity_check_05270", "content.pd_settings_integrity_check_0D24F" ] }, { "plentry.plentry_settings_integrity_check_0B06A": [ "content.pt_settings_integrity_check_0CA39", "content.pd_settings_integrity_check_00413", "content.pd_settings_integrity_check_0C88B" ] }, { "plentry.plentry_settings_integrity_check_0E219": [ "content.pt_settings_integrity_check_0BB60", "content.pd_settings_integrity_check_0FB68", "content.pd_settings_integrity_check_0DD37" ] }, { "plentry.plentry_settings_integrity_check_04A85": [ "content.pt_settings_integrity_check_01E20", "content.pd_settings_integrity_check_05CC6", "content.pd_settings_integrity_check_0EAE5" ] }, { "plentry.plentry_settings_integrity_check_04047": [ "content.pt_settings_integrity_check_01FBF", "content.pd_settings_integrity_check_04BB4", "content.pd_settings_integrity_check_0FF98" ] } ] } ] }, "settings_offload_scanning-latest-en.json": { "title": "title_settings_offload_scannin_06082", "title_settings_offload_scannin_06082": "Command-line settings for offload scanning", "shortdesc": "shortdesc_settings_offload_scannin_00401", "shortdesc_settings_offload_scannin_00401": "The settings related to offload scanning that are available for lsctl. ", "content.title_settings_offload_scannin_0025A": "Available settings", "content.p_settings_offload_scannin_0F579": "", "content.note_settings_offload_scannin_0FA7B": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_settings_offload_scannin_032B1": "offload_scanning ", "content.pd_settings_offload_scannin_0FDEE": "Type: boolean
", "content.pd_settings_offload_scannin_08D7E": "All settings related to offload scanning.", "content.pt_settings_offload_scannin_0E0D3": "offload_scanning enabled ", "content.pd_settings_offload_scannin_0D738": "Type: boolean
", "content.pd_settings_offload_scannin_012C3": "Controls whether offload scanning is on or off.", "content.pt_settings_offload_scannin_06C0A": "offload_scanning icap_servers ", "content.pd_settings_offload_scannin_030DF": "Type: JSON array
", "content.pd_settings_offload_scannin_04CBD": "List of ICAP servers that can be used for offloading scans.", "content.pt_settings_offload_scannin_0BBC3": "offload_scanning icap_servers [SERVER] ", "content.pd_settings_offload_scannin_0376B": "Type: string
", "content.pd_settings_offload_scannin_0DBD2": "The ICAP server settings.", "content.pt_settings_offload_scannin_094C4": "offload_scanning icap_servers [SERVER] address ", "content.pd_settings_offload_scannin_08202": "Type: string
", "content.pd_settings_offload_scannin_08A0D": "The address of the ICAP server that performs the offload scanning.", "content.pt_settings_offload_scannin_01681": "offload_scanning icap_servers [SERVER] port ", "content.pd_settings_offload_scannin_012AF": "Type: integer
", "content.pd_settings_offload_scannin_0A499": "The port number for offload scanning on the ICAP server.", "content.pt_settings_offload_scannin_0CF89": "offload_scanning timeout ", "content.pd_settings_offload_scannin_0FB8C": "Type: integer
", "content.pd_settings_offload_scannin_07BF9": "This setting controls the time, in seconds, to wait for a response from the offloading server.", "desc": [ "content.title_settings_offload_scannin_0025A", "content.note_settings_offload_scannin_0FA7B", { "parml.parml_settings_offload_scannin_0A5F9": [ { "plentry.plentry_settings_offload_scannin_0D055": [ "content.pt_settings_offload_scannin_032B1", "content.pd_settings_offload_scannin_0FDEE", "content.pd_settings_offload_scannin_08D7E" ] }, { "plentry.plentry_settings_offload_scannin_013F4": [ "content.pt_settings_offload_scannin_0E0D3", "content.pd_settings_offload_scannin_0D738", "content.pd_settings_offload_scannin_012C3" ] }, { "plentry.plentry_settings_offload_scannin_0DC41": [ "content.pt_settings_offload_scannin_06C0A", "content.pd_settings_offload_scannin_030DF", "content.pd_settings_offload_scannin_04CBD" ] }, { "plentry.plentry_settings_offload_scannin_0A5EE": [ "content.pt_settings_offload_scannin_0BBC3", "content.pd_settings_offload_scannin_0376B", "content.pd_settings_offload_scannin_0DBD2" ] }, { "plentry.plentry_settings_offload_scannin_041EC": [ "content.pt_settings_offload_scannin_094C4", "content.pd_settings_offload_scannin_08202", "content.pd_settings_offload_scannin_08A0D" ] }, { "plentry.plentry_settings_offload_scannin_0F8B5": [ "content.pt_settings_offload_scannin_01681", "content.pd_settings_offload_scannin_012AF", "content.pd_settings_offload_scannin_0A499" ] }, { "plentry.plentry_settings_offload_scannin_0ADF4": [ "content.pt_settings_offload_scannin_0CF89", "content.pd_settings_offload_scannin_0FB8C", "content.pd_settings_offload_scannin_07BF9" ] } ] } ] }, "settings_automatic_updates-latest-en.json": { "title": "title_settings_automatic_updat_0A4BE", "title_settings_automatic_updat_0A4BE": "Command-line settings for automatic updates", "shortdesc": "shortdesc_settings_automatic_updat_01301", "shortdesc_settings_automatic_updat_01301": "The settings related to automatic updates that are available for lsctl. ", "content.title_settings_automatic_updat_0CAEE": "Available settings", "content.p_settings_automatic_updat_065AB": "", "content.note_settings_automatic_updat_00C8E": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_settings_automatic_updat_00CAA": "updates ", "content.pd_settings_automatic_updat_0BB87": "Type: JSON object
", "content.pd_settings_automatic_updat_0B3D2": "All settings related to automatic updates.", "content.pt_settings_automatic_updat_08D00": "updates enabled ", "content.pd_settings_automatic_updat_0C54F": "Type: boolean
", "content.pd_settings_automatic_updat_04055": "Controls whether automatic updates are switched on or off.", "content.pt_settings_automatic_updat_0060C": "updates product_version ", "content.pd_settings_automatic_updat_0224D": "Type: string
", "content.pd_settings_automatic_updat_0294C": "", "content.note_settings_automatic_updat_00A2B": "Note: Do not use this setting. This setting is reserved for future feature releases.
", "content.pt_settings_automatic_updat_0B8FD": "updates schedule ", "content.pd_settings_automatic_updat_07804": "Type: JSON object
", "content.pd_settings_automatic_updat_03B54": "The automatic update schedule.", "content.pt_settings_automatic_updat_0A9F5": "updates schedule regime ", "content.pd_settings_automatic_updat_02C9F": "Type: string
", "content.pd_settings_automatic_updat_05003": "The type of scheduling for automatic updates. The allowed values are:", "choice.choice_settings_automatic_updat_08BFB": "on_arrival - updates are applied as soon as they become available", "choice.choice_settings_automatic_updat_06214": "at_date - updates are postponed until the time specified in the at_date_schedule setting", "choice.choice_settings_automatic_updat_0CCEC": "with_repetition - updates are applied regularly according to the repetition_schedule settings", "content.pt_settings_automatic_updat_07F63": "updates schedule at_date_schedule ", "content.pd_settings_automatic_updat_06428": "Type: integer
", "content.pd_settings_automatic_updat_0D162": "The time to apply updates when regime is set to at_date. The value must be a timestamp in epoch time format.", "content.pt_settings_automatic_updat_00BBD": "updates schedule repetition_schedule ", "content.pd_settings_automatic_updat_06613": "Type: JSON object
", "content.pd_settings_automatic_updat_0FDF6": "Settings related to automatic updates with a fixed repetition schedule.", "content.pt_settings_automatic_updat_0A122": "updates schedule repetition_schedule day ", "content.pd_settings_automatic_updat_04A32": "Type: string
", "content.pd_settings_automatic_updat_0DB47": "The scheduled day for repeated updates. Allowed values are daily, to check for updates every day at the specific time, or monday, tuesday, wednesday, thursday, friday, saturday, or sunday to check for updates on the given day each week.", "content.pt_settings_automatic_updat_0F69F": "updates schedule repetition_schedule time_of_day ", "content.pd_settings_automatic_updat_0F5C2": "Type: string
", "content.pd_settings_automatic_updat_02ECC": "The scheduled time of day for applying updates. The value is a 24-hour UTC time value (HH:MM).", "content.pt_settings_automatic_updat_06D0F": "updates use_tls ", "content.pd_settings_automatic_updat_06956": "Type: boolean
", "content.pd_settings_automatic_updat_0ADB3": "Controls whether Transport Layer Security (TLS) is used when downloading updates.", "desc": [ "content.title_settings_automatic_updat_0CAEE", "content.note_settings_automatic_updat_00C8E", { "parml.parml_settings_automatic_updat_0297C": [ { "plentry.plentry_settings_automatic_updat_025DC": [ "content.pt_settings_automatic_updat_00CAA", "content.pd_settings_automatic_updat_0BB87", "content.pd_settings_automatic_updat_0B3D2" ] }, { "plentry.plentry_settings_automatic_updat_04693": [ "content.pt_settings_automatic_updat_08D00", "content.pd_settings_automatic_updat_0C54F", "content.pd_settings_automatic_updat_04055" ] }, { "plentry.plentry_settings_automatic_updat_0B3EC": [ "content.pt_settings_automatic_updat_0060C", "content.pd_settings_automatic_updat_0224D", "content.pd_settings_automatic_updat_0294C", "content.note_settings_automatic_updat_00A2B" ] }, { "plentry.plentry_settings_automatic_updat_0C6E5": [ "content.pt_settings_automatic_updat_0B8FD", "content.pd_settings_automatic_updat_07804", "content.pd_settings_automatic_updat_03B54" ] }, { "plentry.plentry_settings_automatic_updat_09D3A": [ "content.pt_settings_automatic_updat_0A9F5", "content.pd_settings_automatic_updat_02C9F", "content.pd_settings_automatic_updat_05003", { "choices.ul_settings_automatic_updat_0F889": [ "choice.choice_settings_automatic_updat_08BFB", "choice.choice_settings_automatic_updat_06214", "choice.choice_settings_automatic_updat_0CCEC" ] } ] }, { "plentry.plentry_settings_automatic_updat_0C4AD": [ "content.pt_settings_automatic_updat_07F63", "content.pd_settings_automatic_updat_06428", "content.pd_settings_automatic_updat_0D162" ] }, { "plentry.plentry_settings_automatic_updat_05A18": [ "content.pt_settings_automatic_updat_00BBD", "content.pd_settings_automatic_updat_06613", "content.pd_settings_automatic_updat_0FDF6" ] }, { "plentry.plentry_settings_automatic_updat_08A13": [ "content.pt_settings_automatic_updat_0A122", "content.pd_settings_automatic_updat_04A32", "content.pd_settings_automatic_updat_0DB47" ] }, { "plentry.plentry_settings_automatic_updat_058DD": [ "content.pt_settings_automatic_updat_0F69F", "content.pd_settings_automatic_updat_0F5C2", "content.pd_settings_automatic_updat_02ECC" ] }, { "plentry.plentry_settings_automatic_updat_06A68": [ "content.pt_settings_automatic_updat_06D0F", "content.pd_settings_automatic_updat_06956", "content.pd_settings_automatic_updat_0ADB3" ] } ] } ], "related": [ "updating_manually_using_update_archive-latest-en", "services_installed_ls64-latest-en" ] }, "http_proxy_settings-latest-en.json": { "title": "title_http_proxy_settings_000001051D", "title_http_proxy_settings_000001051D": "HTTP proxy settings", "shortdesc": "shortdesc_http_proxy_settings_000002966F", "shortdesc_http_proxy_settings_000002966F": "The settings related to HTTP proxy usage that are available for lsctl. ", "content.title_http_proxy_settings_00000FCFC7": "Available settings", "content.p_http_proxy_settings_0000101CAE": "", "content.note_http_proxy_settings_000011FB41": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_http_proxy_settings_0000155194": "http_proxy ", "content.pd_http_proxy_settings_000016B52E": "Type: JSON object
", "content.pd_http_proxy_settings_0000171982": "All HTTP proxy settings.", "content.pt_http_proxy_settings_000019D3D6": "http_proxy enabled ", "content.pd_http_proxy_settings_00001A329E": "Type: boolean
", "content.pd_http_proxy_settings_00001BE092": "Controls whether or not to use an HTTP proxy for features that require network access.", "content.pt_http_proxy_settings_00001D6B18": "http_proxy host ", "content.pd_http_proxy_settings_00001E828C": "Type: string
", "content.pd_http_proxy_settings_00001F441A": "The host name of the HTTP proxy.", "content.pt_http_proxy_settings_0000219BD2": "http_proxy port ", "content.pd_http_proxy_settings_0000222661": "Type: integer
", "content.pd_http_proxy_settings_0000233BF9": "The HTTP proxy port. The value must be a number between 1 and 65535.", "desc": [ "content.title_http_proxy_settings_00000FCFC7", "content.note_http_proxy_settings_000011FB41", { "parml.parml_http_proxy_settings_000013122C": [ { "plentry.plentry_http_proxy_settings_0000141196": [ "content.pt_http_proxy_settings_0000155194", "content.pd_http_proxy_settings_000016B52E", "content.pd_http_proxy_settings_0000171982" ] }, { "plentry.plentry_http_proxy_settings_000018C1F7": [ "content.pt_http_proxy_settings_000019D3D6", "content.pd_http_proxy_settings_00001A329E", "content.pd_http_proxy_settings_00001BE092" ] }, { "plentry.plentry_http_proxy_settings_00001C7FF2": [ "content.pt_http_proxy_settings_00001D6B18", "content.pd_http_proxy_settings_00001E828C", "content.pd_http_proxy_settings_00001F441A" ] }, { "plentry.plentry_http_proxy_settings_000020EB7E": [ "content.pt_http_proxy_settings_0000219BD2", "content.pd_http_proxy_settings_0000222661", "content.pd_http_proxy_settings_0000233BF9" ] } ] } ] }, "malware_scanning-latest-en.json": { "title": "title_malware_scanning_000001_021BAE", "title_malware_scanning_000001_021BAE": "Malware scanning", "shortdesc": "shortdesc_malware_scanning_000002_8B6426", "shortdesc_malware_scanning_000002_8B6426": "The product protects the computer from programs that may damage files, steal personal information, or use it for illegal purposes. ", "content.p_malware_scanning_00000D_2FF5A0": "The product also does the following:", "step.step_malware_scanning_00000F_4F8577": "It can protect the computer against malware in both real time in the background and on demand by using a manual scan.", "step.step_malware_scanning_000011_B0775C": "It can scan specified files and directories, any removable media (such as portable drives) and downloaded content automatically. The product monitors the computer for any changes that may indicate malware.", "content.p_malware_scanning_000013_FBEC91": "Real-time scanning is enabled by default, but the list of files and directories to be included in scanning needs to be added in the Elements Endpoint Protection (EPP) portal before scanning takes place.", "desc": [ "content.p_malware_scanning_00000D_2FF5A0", { "steps.ul_malware_scanning_00000E_BCA44D": [ "step.step_malware_scanning_00000F_4F8577", "step.step_malware_scanning_000011_B0775C" ] }, "content.p_malware_scanning_000013_FBEC91" ] }, "real_time_scanning-latest-en.json": { "title": "title_real_time_scanning_000001_ABB2", "title_real_time_scanning_000001_ABB2": "Real-time scanning", "shortdesc": "shortdesc_real_time_scanning_000002_32F5", "shortdesc_real_time_scanning_000002_32F5": "Real-time scanning protects the computer by scanning files when they are accessed and blocking access to files that contain malware. ", "content.note_real_time_scanning_00000F_FF71": "Note: Individual files and directories that require scanning in real time need to be specified in the Elements Endpoint Protection (EPP) portal. With the default settings, real-time scanning does not scan any files.", "content.p_real_time_scanning_000010_7D46": "Real-time scanning works as follows:", "step.step_real_time_scanning_000012_2340": "The computer tries to access a file.", "step.step_real_time_scanning_000013_C76F": "The file is immediately scanned for malware before the computer is allowed access to the file.", "step.step_real_time_scanning_000015_D4C4": "If malware is found in the file, real-time scanning blocks access to the file so the malware cannot harm the computer.", "step.step_real_time_scanning_000018_3D44": "Based on the settings, real-time scanning may either rename or delete the infected file.", "content.p_real_time_scanning_000019_7776": "Scanned files are classified as clean, malware, potentially unwanted applications, or suspicious. Clean files are not affected by real-time scanning. Infected files are prevented from being opened.", "content.p_real_time_scanning_00001A_0662": "The amount of time and system resources that real-time scanning takes depends on the contents, location, and type of the file.", "content.p_real_time_scanning_00001B_27F3": "Files that take a longer time to scan:", "step.step_real_time_scanning_00001D_A9A0": "Compressed files, such as .zip archives. Note that these files are not scanned by default.", "step.step_real_time_scanning_00001E_51A1": "Files on network file systems.", "step.step_real_time_scanning_00001F_9A2B": "Large files may be affected.", "content.p_real_time_scanning_000020_7135": "Real-time scanning may slow down your computer when a lot of files are accessed at the same time.", "content.note_real_time_scanning_000021_0250": "Note: You can find all scan events in the access.log file.", "desc": [ "content.note_real_time_scanning_00000F_FF71", "content.p_real_time_scanning_000010_7D46", { "steps.ol_real_time_scanning_000011_DCDF": [ "step.step_real_time_scanning_000012_2340", "step.step_real_time_scanning_000013_C76F", "step.step_real_time_scanning_000015_D4C4", "step.step_real_time_scanning_000018_3D44" ] }, "content.p_real_time_scanning_000019_7776", "content.p_real_time_scanning_00001A_0662", "content.p_real_time_scanning_00001B_27F3", { "steps.ul_real_time_scanning_00001C_7C64": [ "step.step_real_time_scanning_00001D_A9A0", "step.step_real_time_scanning_00001E_51A1", "step.step_real_time_scanning_00001F_9A2B" ] }, "content.p_real_time_scanning_000020_7135", "content.note_real_time_scanning_000021_0250" ], "related": [ "configuring_realtime_scanning-latest-en", "settings_real_time_scanning-latest-en", "scanning_manually-latest-en" ] }, "manual_scanning-latest-en.json": { "title": "title_manual_scanning_000001_A827D14", "title_manual_scanning_000001_A827D14": "Manual scanning", "shortdesc": "shortdesc_manual_scanning_000002_D0AF069", "shortdesc_manual_scanning_000002_D0AF069": "The product can scan entire computers to verify that there are no harmful files or unwanted applications. ", "content.p_manual_scanning_00000D_E82942F": "A full computer scan can take a long time to complete, so by limiting the set of files and directories, this takes less time. All other files locations and directories can be excluded from the scan through the Elements Endpoint Protection (EPP) portal.", "content.p_manual_scanning_00000E_D7AA127": "For finer-grained control over manual scanning, the command line functionality using the fsanalyze command can be used.", "desc": [ "content.p_manual_scanning_00000D_E82942F", "content.p_manual_scanning_00000E_D7AA127" ], "related": [ "scanning_manually-latest-en" ] }, "scheduled_scanning-latest-en.json": { "title": "title_scheduled_scanning_000001_0117", "title_scheduled_scanning_000001_0117": "Scheduled scanning", "shortdesc": "shortdesc_scheduled_scanning_000002_1BDE", "shortdesc_scheduled_scanning_000002_1BDE": "Scheduled scanning can help to scan computers when they are not in use and to periodically make sure that the computer is clean. ", "content.p_scheduled_scanning_00000D_62CF": "Scanning of specific files and directories or any removable media can be scheduled to take place at certain times of the day and on specific days of the week.", "desc": [ "content.p_scheduled_scanning_00000D_62CF" ] }, "integrity_checking-latest-en.json": { "title": "title_integrity_checking_000001_69A8", "title_integrity_checking_000001_69A8": "Integrity checking ", "shortdesc": "shortdesc_integrity_checking_000002_A3BD", "shortdesc_integrity_checking_000002_A3BD": "Integrity checking protects important system files against unauthorized modifications. ", "content.p_integrity_checking_00000E_F58B": "You can use integrity checking to detect any modifications to protected files and prevent their use, regardless of file system permissions.", "content.p_integrity_checking_00000F_6879": "To use integrity checking, you need to add the files that you want to protect to a baseline list. The files on this list are protected against unauthorized changes.", "content.p_integrity_checking_000010_ACE2": "Integrity checking works by comparing files on the disk to the baseline attributes, which form a cryptographically signed list of file properties. Integrity checking sends alerts to the administrator of attempts to modify the monitored files.", "content.note_integrity_checking_000011_3651": "Note: Some aspects of integrity checking depend on the type of file system in use. Fully supported file systems include Ext4, ZFS, BTRFS, NFS, CiFS, and others. In essence, full integrity checking takes advantage of file attributes, which are available on most modern file systems, but not all.", "content.p_integrity_checking_000012_030A": "The following table gives more details on how integrity checking handles various events for files that are included in the baseline.", "content.dt_integrity_checking_000015_1FA3": "An untrusted process modifies a file", "content.dd_integrity_checking_000016_C688": "", "content.dd_p_integrity_checking_000017_774E": "Configured with the read and write action settings:
", "choice.choice_integrity_checking_000019_9FF8": "If the write action is set to deny, the modification attempt is blocked and no alert is sent.", "choice.choice_integrity_checking_00001B_38ED": "If the write action is set to allow, integrity checking sends an alert of the modification to the administrator.", "choice.choice_integrity_checking_00001D_728A": "If the read action is set to deny, integrity checking blocks any subsequent attempt to open the file after it has been modified.", "content.dt_integrity_checking_000020_57A0": "A trusted process modifies a file", "content.dd_integrity_checking_000021_4999": "If the program file for a process is included in the baseline and has not been tampered with, it is considered a trusted process. In such cases, integrity checking does not take any action.", "content.dt_integrity_checking_000024_34F3": "Deleting a file", "content.dd_integrity_checking_000025_20F4": "Integrity checking does not prevent or send an alert for the event.", "content.dt_integrity_checking_000028_2FC0": "Renaming a file", "content.dd_integrity_checking_000029_BAF0": "Integrity checking does not prevent or send an alert for the event, but continues to monitor the renamed file.", "content.dt_integrity_checking_00002C_CA20": "Creating a hard or soft link to a file", "content.dd_integrity_checking_00002D_B530": "Integrity checking follows the link.", "content.dt_integrity_checking_000030_7A74": "Replacing a file", "content.dd_integrity_checking_000031_9FA5": "Integrity checking does not prevent or send an alert for the event.", "content.dt_integrity_checking_000034_3CBB": "Changing file permissions", "content.dd_integrity_checking_000035_AC87": "The change is not blocked, but the read and write action settings determine if subsequent attempts to open the file are blocked or prompt an alert.", "content.dt_integrity_checking_000038_C174": "Changing file ownership", "content.dd_integrity_checking_000039_C692": "The change is not blocked, but the read and write action settings determine if subsequent attempts to open the file are blocked or prompt an alert.", "content.dt_integrity_checking_00003C_3C0A": "Changing file attributes", "content.dd_integrity_checking_00003D_E02B": "This includes SELinux labels. Integrity checking does not prevent or send an alert for the event.", "content.note_integrity_checking_00003F_1C69": "Note: About the alerts that integrity checking sends: ", "desc": [ "content.p_integrity_checking_00000E_F58B", "content.p_integrity_checking_00000F_6879", "content.p_integrity_checking_000010_ACE2", "content.note_integrity_checking_000011_3651", "content.p_integrity_checking_000012_030A", { "dl.dl_integrity_checking_000013_CCC0": [ { "dlentry.dlentry_integrity_checking_000014_6DDD": [ "content.dt_integrity_checking_000015_1FA3", "content.dd_integrity_checking_000016_C688", "content.dd_p_integrity_checking_000017_774E", { "choices.ul_integrity_checking_000018_6B67": [ "choice.choice_integrity_checking_000019_9FF8", "choice.choice_integrity_checking_00001B_38ED", "choice.choice_integrity_checking_00001D_728A" ] } ] }, { "dlentry.dlentry_integrity_checking_00001F_F56C": [ "content.dt_integrity_checking_000020_57A0", "content.dd_integrity_checking_000021_4999" ] }, { "dlentry.dlentry_integrity_checking_000023_D828": [ "content.dt_integrity_checking_000024_34F3", "content.dd_integrity_checking_000025_20F4" ] }, { "dlentry.dlentry_integrity_checking_000027_A242": [ "content.dt_integrity_checking_000028_2FC0", "content.dd_integrity_checking_000029_BAF0" ] }, { "dlentry.dlentry_integrity_checking_00002B_2B97": [ "content.dt_integrity_checking_00002C_CA20", "content.dd_integrity_checking_00002D_B530" ] }, { "dlentry.dlentry_integrity_checking_00002F_EB44": [ "content.dt_integrity_checking_000030_7A74", "content.dd_integrity_checking_000031_9FA5" ] }, { "dlentry.dlentry_integrity_checking_000033_2C9C": [ "content.dt_integrity_checking_000034_3CBB", "content.dd_integrity_checking_000035_AC87" ] }, { "dlentry.dlentry_integrity_checking_000037_4929": [ "content.dt_integrity_checking_000038_C174", "content.dd_integrity_checking_000039_C692" ] }, { "dlentry.dlentry_integrity_checking_00003B_D07B": [ "content.dt_integrity_checking_00003C_3C0A", "content.dd_integrity_checking_00003D_E02B" ] } ] }, "content.note_integrity_checking_00003F_1C69" ], "related": [ "turning_on_integrity_checking-latest-en", "settings_integrity_checking-latest-en", "integrity_checker_command_line-latest-en" ] }, "checking_client_status-latest-en.json": { "title": "title_checking_client_status_000A6B6", "title_checking_client_status_000A6B6": "Checking client status", "shortdesc": "shortdesc_checking_client_status_000E3AC", "shortdesc_checking_client_status_000E3AC": "The Send full status update request is an option through the WithSecure Elements Endpoint Protection portal (EPP) for checking the status of client installations. ", "content.p_checking_client_status_00072E2": "By selecting the Send full status update option on the Device page, the clients sync with our backend and update the portal with any available information about their current status.", "content.p_checking_client_status_000AD08": "The request also checks for any available updates at the same time. If the client is configured to install updates immediately, the client also installs the updates available.", "content.p_checking_client_status_0000560": "The Send full status update request enables the following:", "step.step_checking_client_status_000EE8F": "It checks the clients status information,", "step.step_checking_client_status_00077F2": "It checks for any available updates (product and engine), and", "step.step_checking_client_status_00040C0": "It installs any available updates, if configured on the client side.", "content.p_checking_client_status_00074E9": "In effect, this is a way to check for updates on a regular basis.", "desc": [ "content.p_checking_client_status_00072E2", "content.p_checking_client_status_000AD08", "content.p_checking_client_status_0000560", { "steps.ul_checking_client_status_0002430": [ "step.step_checking_client_status_000EE8F", "step.step_checking_client_status_00077F2", "step.step_checking_client_status_00040C0" ] }, "content.p_checking_client_status_00074E9" ] }, "aua-latest-en.json": { "title": "title_aua_000001_8EC8CD12", "title_aua_000001_8EC8CD12": "Automatic updates ", "shortdesc": "shortdesc_aua_000002_1A94D373", "shortdesc_aua_000002_1A94D373": "Automatic updates make sure that the Linux hosts in your managed network stay protected. ", "content.p_aua_00000B_A1493C98": "With automatic updates, the managed hosts retrieve the latest updates based on the policy settings. By default, automatic updates are turned on. We strongly recommend that you keep this feature turned on, as new virus definitions are made available several times a day.", "content.p_aua_00000C_EE062ABA": "WithSecure uses dedicated service connections between the backend systems and installed products, referred to as channels, to deliver updates to the malware definition databases, scanning engines, and the actual products. Each channel provides updates for a specific product component or function.", "content.p_aua_00000D_63175BCC": "The settings for automatic updates apply to the three WithSecure product channels (linuxsecurity, fsbg, and baseguard) that the product uses. The automatic update settings do not affect updates for other channels, such as the scanning engines, as they are applied immediately when they are available. The exception to this is the main feature switch for automatic updates: turning automatic updates off disables the updates for all channels.", "content.p_aua_000011_BE6C98D2": "In addition, product channel updates are applied one week after the update has been published at the latest.", "content.title_aua_000012_B04F282F": "Checking the latest virus definition database versions", "content.p_aua_000013_DF076B8C": "To ensure your systems are using the most up-to-date virus definition databases, you can query the Elements API using the following endpoint:", "content.dt_aua_000017_907FED24": "Endpoint:", "content.dd_aua_000018_21F33EB7": "GET /databases/v1/latest-versions", "content.dt_aua_00001B_3DDBC65E": "Purpose:", "content.dd_aua_00001C_3234AE84": "Retrieve the latest version numbers of all available virus definition databases.", "content.dt_aua_00001E_7BCC63BD": "Response:", "content.dd_aua_00001F_707CF5B3": "A list of databases, each with its corresponding latest version number.", "content.dt_aua_000021_184DC94D": "Usage:", "content.dd_aua_000022_E3331821": "Use this endpoint to verify that your systems are aligned with the most current database versions. This helps maintain optimal security and performance across your environment.", "content.note_aua_000023_6F37334C": "Note: Even if a newer database version is available, your endpoints might not have received it yet, as this depends on how frequently the endpoint client applications check for updates.", "content.p_aua_000024_2DA3E256": "For information on how to use this endpoint, see Elements API reference", "content.p_aua_000026_5853F258": "To get started with the Elements API, see Elements API getting started", "desc": [ "content.p_aua_00000B_A1493C98", "content.p_aua_00000C_EE062ABA", "content.p_aua_00000D_63175BCC", "content.p_aua_000011_BE6C98D2", "content.title_aua_000012_B04F282F", "content.p_aua_000013_DF076B8C", { "dl.dl_aua_000015_9DD06C93": [ { "dlentry.dlentry_aua_000016_269C31CE": [ "content.dt_aua_000017_907FED24", "content.dd_aua_000018_21F33EB7" ] }, { "dlentry.dlentry_aua_00001A_E55BE59B": [ "content.dt_aua_00001B_3DDBC65E", "content.dd_aua_00001C_3234AE84" ] }, { "dlentry.dlentry_aua_00001D_2E2A9D20": [ "content.dt_aua_00001E_7BCC63BD", "content.dd_aua_00001F_707CF5B3" ] }, { "dlentry.dlentry_aua_000020_3386D664": [ "content.dt_aua_000021_184DC94D", "content.dd_aua_000022_E3331821" ] } ] }, "content.note_aua_000023_6F37334C", "content.p_aua_000024_2DA3E256", "content.p_aua_000026_5853F258" ], "related": [ "configuring_aua-latest-en", "settings_automatic_updates-latest-en", "updating_manually_using_update_archive-latest-en" ] }, "using_http_proxies-latest-en.json": { "title": "title_using_http_proxies_000001_E55E", "title_using_http_proxies_000001_E55E": "Using HTTP proxies", "shortdesc": "shortdesc_using_http_proxies_000002_F52B", "shortdesc_using_http_proxies_000002_F52B": "The product has a single, global HTTP proxy setting, which is always used when the product makes HTTP requests to external services. ", "content.p_using_http_proxies_00000F_D830": "You can configure the global HTTP proxy setting using a command line option either when activating the product or with the lsctl utility after you have activated the product.", "content.p_using_http_proxies_000011_6A0E": "If you use the command line option to define the product settings, the product saves the configuration as a local setting override. This means that once you have finished activating the product, you can view the settings with the following command: lsctl get http_proxy.", "content.p_using_http_proxies_000013_B2A0": "Local overrides take precedence over the configuration that is retrieved from remote management services (WithSecure Elements Endpoint Protection or Policy Manager). To configure the proxy settings remotely, you have to mark the setting as locked in the management service. When the setting is locked, the value set in the profile or policy that is distributed from the management service is always used, even if a local configuration exists.", "content.p_using_http_proxies_000016_96B8": "If you specify the global HTTP proxy, the product uses the proxy to communicate with Elements Endpoint Protection. You can also change the proxy settings in the Elements Endpoint Protection portal.", "content.p_using_http_proxies_00002A_0062": "--http-proxy=<host address>:<host port number>", "content.note_using_http_proxies_00001F_6D7B": "Note: The product supports basic authentication for HTTP proxies. If the specified proxy requires authentication, use the --http-proxy=username:password@host:port format to specify the credentials for the proxy.", "subchoice.choice_using_http_proxies_00001C_EABC": "To set the proxy when you run the activation or installer command, include the --http-proxy option in the command:", "content.p_using_http_proxies_00002B_F084": "/opt/f-secure/linuxsecurity/bin/lsctl set http_proxy host <host address>
/opt/f-secure/linuxsecurity/bin/lsctl set http_proxy port <host port number>
/opt/f-secure/linuxsecurity/bin/lsctl set http_proxy enabled true", "subchoice.choice_using_http_proxies_000021_CEA9": "To set the proxy after activation, run the following lsctl commands:", "step.step_using_http_proxies_000018_F77A": "Set the HTTP proxy:", "content.p_using_http_proxies_000026_1411": "/opt/f-secure/linuxsecurity/bin/lsctl get http_proxy", "content.p_using_http_proxies_000028_DE46": "This returns the current settings: {
\"enabled\": true,
\"host\": <host address>,
\"port\": <host port number>
}", "step.step_using_http_proxies_000024_316E": "Run the following command to check the proxy setting:", "desc": [ "content.p_using_http_proxies_00000F_D830", "content.p_using_http_proxies_000011_6A0E", "content.p_using_http_proxies_000013_B2A0", "content.p_using_http_proxies_000016_96B8", { "steps.steps_using_http_proxies_000017_2E55": [ "step.step_using_http_proxies_000018_F77A", { "subchoices.choices_using_http_proxies_00001B_972E": [ "subchoice.choice_using_http_proxies_00001C_EABC", "content.p_using_http_proxies_00002A_0062", "content.note_using_http_proxies_00001F_6D7B", "subchoice.choice_using_http_proxies_000021_CEA9", "content.p_using_http_proxies_00002B_F084" ] }, "step.step_using_http_proxies_000024_316E", "content.p_using_http_proxies_000026_1411", "content.p_using_http_proxies_000028_DE46" ] } ] }, "lsctl_example_managing_ic_profiles-latest-en.json": { "title": "title_lsctl_example_managing_i_08AE2", "title_lsctl_example_managing_i_08AE2": "Example: managing integrity checker profiles", "shortdesc": "shortdesc_lsctl_example_managing_i_0A345", "shortdesc_lsctl_example_managing_i_0A345": "This example of a common task where you can use lsctl shows how to modify integrity checker profiles through the ic profiles array. ", "content.p_lsctl_example_managing_i_0AB90": "The following steps outline how to add an integrity checker profile to prevent writing to files inside the /opt directory.", "content.p_lsctl_example_managing_i_0DDA5": "/opt/f-secure/linuxsecurity/bin/lsctl set ic enabled yes
/opt/f-secure/linuxsecurity/bin/lsctl add --file - ic profiles <<EOF
{
\"path\": \"/opt\",
\"verify_attributes\": {
\"mode\": false,
\"user\": false,
\"group\": false,
\"size\": false,
\"mtime\": false
},
\"read_action\": \"allow\",
\"write_action\": \"deny\"
}
EOF", "content.p_lsctl_example_managing_i_09BA1": "This example uses shell's here document syntax for entering multi-line input.", "step.step_lsctl_example_managing_i_0B7E9": "Run the following command:", "content.p_lsctl_example_managing_i_04C19": "/opt/f-secure/linuxsecurity/bin/lsctl set --prompt ic profiles /opt", "content.p_lsctl_example_managing_i_000E5": "This opens a text editor with the current value of the /opt profile specified as a template.", "step.step_lsctl_example_managing_i_0B7F2": "To edit the profile, run the following command:", "content.p_lsctl_example_managing_i_07AF2": "/opt/f-secure/linuxsecurity/bin/lsctl set ic profiles '[]'", "step.step_lsctl_example_managing_i_07F71": "To remove all integrity checker profiles, run the following command to set ic profiles to an empty array:", "desc": [ "content.p_lsctl_example_managing_i_0AB90", { "steps.steps_lsctl_example_managing_i_0ACCE": [ "step.step_lsctl_example_managing_i_0B7E9", "content.p_lsctl_example_managing_i_0DDA5", "content.p_lsctl_example_managing_i_09BA1", "step.step_lsctl_example_managing_i_0B7F2", "content.p_lsctl_example_managing_i_04C19", "content.p_lsctl_example_managing_i_000E5", "step.step_lsctl_example_managing_i_07F71", "content.p_lsctl_example_managing_i_07AF2" ] } ] }, "command_line_usage-latest-en.json": { "title": "title_command_line_usage_000001_B811", "title_command_line_usage_000001_B811": "Command line usage", "shortdesc": "shortdesc_command_line_usage_000002_A61C", "shortdesc_command_line_usage_000002_A61C": "This section describes the commands that you can run from the command line in the product. ", "content.p_command_line_usage_00000D_3097": "Use the command-line topics in this section to control product services, run scans, test protection, and update the product manually. The available procedures describe the commands and options for each operation.", "desc": [ "content.p_command_line_usage_00000D_3097" ] }, "starting_stopping_services-latest-en.json": { "title": "title_starting_stopping_servic_042D4", "title_starting_stopping_servic_042D4": "Starting and stopping services", "shortdesc": "shortdesc_starting_stopping_servic_0A934", "shortdesc_starting_stopping_servic_0A934": "The product contains a number of background services, which you can control using the /opt/f-secure/fsbg/bin/master-switch command. ", "content.p_starting_stopping_servic_0F3AF": "You can use the master-switch command to control all the services related to the product. The syntax for the command is:", "content.p_starting_stopping_servic_05AD1": "/opt/f-secure/fsbg/bin/master-switch ( on | off | status | enable | disable | is-enabled )", "content.note_starting_stopping_servic_0766B": "Note: WithSecure Elements Endpoint Protection controls whether or not the master-switch command can be used for turning off services. Change this using the Tamper protection > Allow user to turn off all security features setting in the Elements Endpoint Protection (EPP) portal.", "content.p_starting_stopping_servic_08B9D": "Use the off sub-command to temporarily stop all WithSecure services:", "content.p_starting_stopping_servic_0FC1A": "/opt/f-secure/fsbg/bin/master-switch off", "content.p_starting_stopping_servic_08326": "The on sub-command restarts the stopped services:", "content.p_starting_stopping_servic_07E0B": "/opt/f-secure/fsbg/bin/master-switch on", "content.p_starting_stopping_servic_0A164": "To view the status of WithSecure services, use the status sub-command:", "content.p_starting_stopping_servic_03077": "/opt/f-secure/fsbg/bin/master-switch status", "content.p_starting_stopping_servic_0AFF8": "The disable sub-command turns off all WithSecure services. The services stay turned off after you restart the computer. The enable sub-command turns on all WithSecure services again. Use the is-enabled sub-command to check if WithSecure services are turned on.", "desc": [ "content.p_starting_stopping_servic_0F3AF", "content.p_starting_stopping_servic_05AD1", "content.note_starting_stopping_servic_0766B", "content.p_starting_stopping_servic_08B9D", "content.p_starting_stopping_servic_0FC1A", "content.p_starting_stopping_servic_08326", "content.p_starting_stopping_servic_07E0B", "content.p_starting_stopping_servic_0A164", "content.p_starting_stopping_servic_03077", "content.p_starting_stopping_servic_0AFF8" ] }, "scanning_manually-latest-en.json": { "title": "title_scanning_manually_000001_96595", "title_scanning_manually_000001_96595": "Scanning the computer manually from the command line", "shortdesc": "shortdesc_scanning_manually_000002_7F307", "shortdesc_scanning_manually_000002_7F307": "You can scan the computer for malware manually from the command line of a Linux host that has the product installed. ", "content.p_scanning_manually_00000F_2BDC2": "Make sure the user account you run fsanalyze as has read access to the files, and read and execute access to all directories to be scanned. To rename or remove infected files, the user also needs write access to those directories.", "content.p_scanning_manually_000012_7072F": "The fsanalyze command scans specified targets (files or directories) and reports any malicious code it detects.", "content.p_scanning_manually_000014_9D3B6": "If no files are specified on the command line, fsanalyze reads the standard input for content to analyze. Otherwise, every given file is analyzed and every given directory is scanned recursively, with the following exceptions:", "step.step_scanning_manually_000017_07FE4": "Special files (such as socket, FIFO, or device files), and files on the /proc and /sys special file systems are skipped.", "step.step_scanning_manually_00001A_4ED92": "Recursive scanning does not follow symbolic links unless this is explicitly requested with the --follow command line option.", "step.step_scanning_manually_00001C_B1675": "Recursive scanning does not automatically cross file system boundaries. To scan files mounted on other file systems, specify the mount points explicitly on the command line.", "content.note_scanning_manually_00001D_70C1F": "Note: The exclusions that are set in the current policy for manual scanning are applied when you use manual scanning from the command line. If you have excluded any paths in the manual scanning policy, recursive scanning crosses file system boundaries.", "content.p_scanning_manually_000022_16BB1": "Usage: fsanalyze [OPTIONS] [FILE...]", "content.p_scanning_manually_000024_F1626": "Analyze each FILE for potential malicious content. If no file is specified, analyze standard input, in which case the only supported action is none.", "content.dt_scanning_manually_00002A_FD5D9": "-h, --help ", "content.dd_scanning_manually_00002B_C0E8A": "Show help.", "content.dt_scanning_manually_00002D_D5E68": "--malware=ACTION ", "content.dd_scanning_manually_00002E_28021": "Action to take when a file is detected as malware. If ACTION is remove the file is removed; if ACTION is rename the file is renamed adding the detection type as an extension; if ACTION is none, the infection is only reported on standard output.
", "content.dd_scanning_manually_000032_92A88": "Default: rename", "content.dt_scanning_manually_000035_BA2FC": "--pua=ACTION ", "content.dd_scanning_manually_000036_D732A": "Action to take when a file is detected as a potentially unwanted application. Options for the action are the same as for malware.
", "content.dd_scanning_manually_000037_31A87": "Default: none", "content.dt_scanning_manually_00003A_76272": "--suspected=ACTION ", "content.dd_scanning_manually_00003B_E4304": "Action to take when a file is detected as suspicious. Options for the action are the same as for malware.
", "content.dd_scanning_manually_00003C_14E22": "Default: none", "content.dt_scanning_manually_00003F_65316": "-L, --follow ", "content.dd_scanning_manually_000040_B1D46": "Follow symbolic links.", "content.dt_scanning_manually_000042_8C8F1": "-l, --list ", "content.dd_scanning_manually_000043_6A922": "List all scanned files.", "content.dt_scanning_manually_000045_03074": "--preserve-atime=VALUE ", "content.dd_scanning_manually_000046_2571D": "Preserve the access time of files that are scanned. Value can be yes or no.
", "content.dd_scanning_manually_000049_BC1D9": "Default: no", "content.dt_scanning_manually_00004C_E4021": "-q, --quiet ", "content.dd_scanning_manually_00004D_B4FC7": "Only output the scan results.", "content.dt_scanning_manually_00004F_A188D": "--scan-archives=VALUE ", "content.dd_scanning_manually_000050_B3131": "Enable archive scanning. Value can be yes or no.
", "content.dd_scanning_manually_000053_FFF00": "Default: no", "content.dt_scanning_manually_000056_59278": "--max-nested=NUMBER ", "content.dd_scanning_manually_000057_E81D6": "Set the maximum allowed nesting level of scanned archives.
", "content.dd_scanning_manually_000058_04153": "Default: 5", "content.dt_scanning_manually_00005B_014D9": "--detect-max-nested=VALUE ", "content.dd_scanning_manually_00005C_90B86": "If enabled, treat archives that exceed the maximum depth as malware. Value can be yes or no.
", "content.dd_scanning_manually_00005F_19DD3": "Default: no", "content.dt_scanning_manually_000062_FA341": "--detect-encrypted-archives=VALUE ", "content.dd_scanning_manually_000063_A0885": "Treat encrypted archives as malware. Value can be yes or no.
", "content.dd_scanning_manually_000066_DF612": "Default: no", "content.dt_scanning_manually_000069_94668": "--detect-pua=VALUE ", "content.dd_scanning_manually_00006A_B35A6": "If disabled, potentially unwanted applications are ignored. Value can be yes or no.
", "content.dd_scanning_manually_00006D_A731D": "Default: yes", "content.dt_scanning_manually_000070_39EFC": "--use-orsp=VALUE ", "content.dd_scanning_manually_000071_B1E00": "If enabled, use the reputation service (ORSP) from Security Cloud. Value can be yes or no.
", "content.dd_scanning_manually_000074_C0281": "Default: yes", "content.dt_scanning_manually_000077_66DDA": "-v, --version ", "content.dd_scanning_manually_000078_66C05": "Display program version and exit.", "content.dt_scanning_manually_00007A_6E3EA": "--quoting-style=STYLE ", "content.dd_scanning_manually_00007B_6AC88": "Set how to quote the output. If STYLE is url, the output is URL-encoded; if STYLE is escape, ASCII control characters in the output are escaped as <NAME>, and if the output is not redirected to a file, they are also highlighted; if STYLE is literal, the output is printed as is.
", "content.dd_scanning_manually_000080_065E9": "Default: url", "content.dt_scanning_manually_000083_A0C32": "--ignore-exclude-paths ", "content.dd_scanning_manually_000084_4BEEF": "Does not use the exclusions set from the current policy for manual scanning.", "content.p_scanning_manually_000027_8CE89": "", "step.step_scanning_manually_00001F_FA594": "Run the following command from the shell to start the manual scan: /opt/f-secure/linuxsecurity/bin/fsanalyze [OPTIONS] [FILE...]", "content.p_scanning_manually_000086_0AB0F": "The scanning exit codes are as follows:", "step.step_scanning_manually_000088_6FB33": "0 = scanning was completed with no errors, and no malware, PUA, or suspicious content was detected", "step.step_scanning_manually_00008A_84FF1": "1 = scanning failed for one or more files", "step.step_scanning_manually_00008C_E7261": "2 = scanning was completed with no errors, but malware, PUA, or suspicious content was detected", "desc": [ "content.p_scanning_manually_00000F_2BDC2", "content.p_scanning_manually_000012_7072F", "content.p_scanning_manually_000014_9D3B6", { "steps.ul_scanning_manually_000016_F4DB8": [ "step.step_scanning_manually_000017_07FE4", "step.step_scanning_manually_00001A_4ED92", "step.step_scanning_manually_00001C_B1675" ] }, "content.note_scanning_manually_00001D_70C1F", { "steps.steps_scanning_manually_00001E_665AB": [ "step.step_scanning_manually_00001F_FA594", "content.p_scanning_manually_000022_16BB1", "content.p_scanning_manually_000024_F1626", "content.p_scanning_manually_000027_8CE89", { "dl.dl_scanning_manually_000028_964ED": [ { "dlentry.dlentry_scanning_manually_000029_F15E8": [ "content.dt_scanning_manually_00002A_FD5D9", "content.dd_scanning_manually_00002B_C0E8A" ] }, { "dlentry.dlentry_scanning_manually_00002C_3E9D5": [ "content.dt_scanning_manually_00002D_D5E68", "content.dd_scanning_manually_00002E_28021", "content.dd_scanning_manually_000032_92A88" ] }, { "dlentry.dlentry_scanning_manually_000034_B542B": [ "content.dt_scanning_manually_000035_BA2FC", "content.dd_scanning_manually_000036_D732A", "content.dd_scanning_manually_000037_31A87" ] }, { "dlentry.dlentry_scanning_manually_000039_0170F": [ "content.dt_scanning_manually_00003A_76272", "content.dd_scanning_manually_00003B_E4304", "content.dd_scanning_manually_00003C_14E22" ] }, { "dlentry.dlentry_scanning_manually_00003E_86C89": [ "content.dt_scanning_manually_00003F_65316", "content.dd_scanning_manually_000040_B1D46" ] }, { "dlentry.dlentry_scanning_manually_000041_F8765": [ "content.dt_scanning_manually_000042_8C8F1", "content.dd_scanning_manually_000043_6A922" ] }, { "dlentry.dlentry_scanning_manually_000044_0660F": [ "content.dt_scanning_manually_000045_03074", "content.dd_scanning_manually_000046_2571D", "content.dd_scanning_manually_000049_BC1D9" ] }, { "dlentry.dlentry_scanning_manually_00004B_A272D": [ "content.dt_scanning_manually_00004C_E4021", "content.dd_scanning_manually_00004D_B4FC7" ] }, { "dlentry.dlentry_scanning_manually_00004E_9FCF3": [ "content.dt_scanning_manually_00004F_A188D", "content.dd_scanning_manually_000050_B3131", "content.dd_scanning_manually_000053_FFF00" ] }, { "dlentry.dlentry_scanning_manually_000055_97731": [ "content.dt_scanning_manually_000056_59278", "content.dd_scanning_manually_000057_E81D6", "content.dd_scanning_manually_000058_04153" ] }, { "dlentry.dlentry_scanning_manually_00005A_DEFF3": [ "content.dt_scanning_manually_00005B_014D9", "content.dd_scanning_manually_00005C_90B86", "content.dd_scanning_manually_00005F_19DD3" ] }, { "dlentry.dlentry_scanning_manually_000061_B851F": [ "content.dt_scanning_manually_000062_FA341", "content.dd_scanning_manually_000063_A0885", "content.dd_scanning_manually_000066_DF612" ] }, { "dlentry.dlentry_scanning_manually_000068_B49C1": [ "content.dt_scanning_manually_000069_94668", "content.dd_scanning_manually_00006A_B35A6", "content.dd_scanning_manually_00006D_A731D" ] }, { "dlentry.dlentry_scanning_manually_00006F_8B8BD": [ "content.dt_scanning_manually_000070_39EFC", "content.dd_scanning_manually_000071_B1E00", "content.dd_scanning_manually_000074_C0281" ] }, { "dlentry.dlentry_scanning_manually_000076_DAB9A": [ "content.dt_scanning_manually_000077_66DDA", "content.dd_scanning_manually_000078_66C05" ] }, { "dlentry.dlentry_scanning_manually_000079_D6E1B": [ "content.dt_scanning_manually_00007A_6E3EA", "content.dd_scanning_manually_00007B_6AC88", "content.dd_scanning_manually_000080_065E9" ] }, { "dlentry.dlentry_scanning_manually_000082_09EFA": [ "content.dt_scanning_manually_000083_A0C32", "content.dd_scanning_manually_000084_4BEEF" ] } ] } ] }, "content.p_scanning_manually_000086_0AB0F", { "steps.ul_scanning_manually_000087_C049C": [ "step.step_scanning_manually_000088_6FB33", "step.step_scanning_manually_00008A_84FF1", "step.step_scanning_manually_00008C_E7261" ] } ] }, "updating_the_product_manually_from_the_command_line-latest-en.json": { "title": "title_updating_the_product_man_009F1", "title_updating_the_product_man_009F1": "Updating the product manually from the command line", "shortdesc": "shortdesc_updating_the_product_man_03508", "shortdesc_updating_the_product_man_03508": "You can update the product, the malware definition databases, and the scanning engines manually to their latest versions using the lsctl program. ", "content.p_updating_the_product_man_07959": "You can update the product from the command line by running the following command as the root user:", "content.p_updating_the_product_man_0489E": "/opt/f-secure/linuxsecurity/bin/lsctl update", "content.p_updating_the_product_man_03A72": "This command checks for the availability of new updates over the network, and downloads and installs them on the system to make sure that everything is up to date.", "content.p_updating_the_product_man_0D139": "The --timeout option can be used to specify the period of time to wait, in seconds, for the update to complete before letting it finish in the background. The value 0, which is used as the default if the option is not specified, disables the timeout.", "content.note_updating_the_product_man_0B6DF": "Note: There are a few things to consider before and during the update: ", "desc": [ "content.p_updating_the_product_man_07959", "content.p_updating_the_product_man_0489E", "content.p_updating_the_product_man_03A72", "content.p_updating_the_product_man_0D139", "content.note_updating_the_product_man_0B6DF" ], "related": [ "updating_manually_using_update_archive-latest-en", "starting_stopping_services-latest-en" ] }, "testing_av-latest-en.json": { "title": "title_testing_av_000001_36AED9CE", "title_testing_av_000001_36AED9CE": "Testing the antivirus protection ", "shortdesc": "shortdesc_testing_av_000002_035D5049", "shortdesc_testing_av_000002_035D5049": "To test whether the product operates correctly, you can use a special test file that is detected as a virus. ", "content.p_testing_av_00000F_EE40A4B6": "The EICAR (EICAR is the European Institute of Computer Anti-virus Research) standard antivirus test file is detected by several antivirus programs. The Eicar info page can be found at EICAR info page.", "subchoice.choice_testing_av_000015_B90C49A1": "Download the EICAR test file from EICAR test file, or", "subchoice.choice_testing_av_000017_0B61BFBF": "Use any text editor to create the eicar.com file with the following single line in it: X5O!P%@AP[4\\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*", "step.step_testing_av_000012_F25E4850": "Download or create the EICAR test file.", "step.step_testing_av_000019_04F0F690": "Run the following command: /opt/f-secure/linuxsecurity/bin/fsanalyze eicar.com ", "content.p_testing_av_00001D_7869664F": "The product should detect the EICAR test file as a virus.", "desc": [ "content.p_testing_av_00000F_EE40A4B6", { "steps.steps_testing_av_000011_E80DFCFF": [ "step.step_testing_av_000012_F25E4850", { "subchoices.choices_testing_av_000014_3313E8AE": [ "subchoice.choice_testing_av_000015_B90C49A1", "subchoice.choice_testing_av_000017_0B61BFBF" ] }, "step.step_testing_av_000019_04F0F690" ] }, "content.p_testing_av_00001D_7869664F" ] }, "integrity_checker_command_line-latest-en.json": { "title": "title_integrity_checker_comman_01B72", "title_integrity_checker_comman_01B72": "Running the integrity checker from the command line", "shortdesc": "shortdesc_integrity_checker_comman_03FC6", "shortdesc_integrity_checker_comman_03FC6": "Integrity checking functionality is partially available on the command line. ", "content.p_integrity_checker_comman_0C825": "To run the integrity checker from the command line on a Linux host:", "step.step_integrity_checker_comman_0FCBE": "Log in to the Linux host as root.", "content.p_integrity_checker_comman_00B99": "Usage:", "cell.choptionhd_integrity_checker_comman_0AD9C": "Option", "cell.chdeschd_integrity_checker_comman_0106A": "Description", "cell.choption_integrity_checker_comman_0D3C3": "fsic verify", "cell.chdesc_integrity_checker_comman_0F086": "This checks each file in the baseline that is configured for the policy. It checks if the file has been tampered with and also scans the file for malware. The command prints every file that fails verification to the standard output.", "cell.choption_integrity_checker_comman_090E4": "fsic unprotect", "cell.chdesc_integrity_checker_comman_0FCA3": "This allows baseline files to be modified.", "cell.choption_integrity_checker_comman_0260B": "fsic protect", "cell.chdesc_integrity_checker_comman_052CD": "This regenerates the baseline index and prevents modifications to the baseline files.", "step.step_integrity_checker_comman_0B822": "Run the following command from the shell: /opt/f-secure/linuxsecurity/bin/fsic", "subchoice.choice_integrity_checker_comman_052B2": "0 = No errors or failed verification results were encountered", "subchoice.choice_integrity_checker_comman_0D38B": "1 = An error occurred that prevented the command from running successfully", "subchoice.choice_integrity_checker_comman_0728D": "2 = One or more files have been tampered with or contained malware, PUA, or suspicious content", "step.step_integrity_checker_comman_00DA1": "Check the exit code for the command:", "desc": [ "content.p_integrity_checker_comman_0C825", { "steps.steps_integrity_checker_comman_0624F": [ "step.step_integrity_checker_comman_0FCBE", "step.step_integrity_checker_comman_0B822", "content.p_integrity_checker_comman_00B99", { "table.table_integrity_checker_comman_06308": [ { "thead.chhead_integrity_checker_comman_00D44": [ "cell.choptionhd_integrity_checker_comman_0AD9C", "cell.chdeschd_integrity_checker_comman_0106A" ] }, { "row.chrow_integrity_checker_comman_0CFBA": [ "cell.choption_integrity_checker_comman_0D3C3", "cell.chdesc_integrity_checker_comman_0F086" ] }, { "row.chrow_integrity_checker_comman_062CB": [ "cell.choption_integrity_checker_comman_090E4", "cell.chdesc_integrity_checker_comman_0FCA3" ] }, { "row.chrow_integrity_checker_comman_06AA9": [ "cell.choption_integrity_checker_comman_0260B", "cell.chdesc_integrity_checker_comman_052CD" ] } ] }, "step.step_integrity_checker_comman_00DA1", { "subchoices.choices_integrity_checker_comman_04A49": [ "subchoice.choice_integrity_checker_comman_052B2", "subchoice.choice_integrity_checker_comman_0D38B", "subchoice.choice_integrity_checker_comman_0728D" ] } ] } ] }, "alert_levels-latest-en.json": { "title": "title_alert_levels_000001_C29E371F", "title_alert_levels_000001_C29E371F": "Alert severity levels ", "shortdesc": "shortdesc_alert_levels_000002_22D00CCC", "shortdesc_alert_levels_000002_22D00CCC": "Alerts are divided into severity levels. ", "content.title_alert_levels_00000B_7B52C049": "Severity levels", "cell.entry_alert_levels_000012_51A22C3D": "Severity level", "cell.entry_alert_levels_000013_3D1455AF": "Syslog priority", "cell.entry_alert_levels_000014_3BB8B849": "Description", "cell.entry_alert_levels_000017_095FD5FF": "Informational", "cell.entry_alert_levels_000018_8F89BA8E": "info", "cell.entry_alert_levels_000019_F03F903B": "Normal operating information from the host.", "cell.entry_alert_levels_00001C_A13DB97F": "Warning", "cell.entry_alert_levels_00001D_A24C529A": "warning", "cell.entry_alert_levels_00001E_F69D75F6": "A warning from the host.
For example, an error when trying to read a file.", "cell.entry_alert_levels_000022_3AE852BA": "Error", "cell.entry_alert_levels_000023_5AB5C038": "err", "cell.entry_alert_levels_000024_46149613": "Recoverable error on the host.
For example, the virus definition database update is older than the earlier accepted version.", "cell.entry_alert_levels_000028_9D28ED72": "Fatal Error", "cell.entry_alert_levels_000029_E6A7BBA5": "emerg", "cell.entry_alert_levels_00002A_B12AC69A": "Unrecoverable error on the host that requires attention from the administrator.
For example, a process fails to start or loading a kernel module fails.", "cell.entry_alert_levels_00002E_D04C71FB": "Security alert", "cell.entry_alert_levels_00002F_A006333B": "alert", "cell.entry_alert_levels_000030_45DF576D": "A security alert on the host.
For example, a virus-alert. The alert includes information of the infection and the performed operation.", "desc": [ "content.title_alert_levels_00000B_7B52C049", { "table.table_severity-levels": [ { "thead.thead_alert_levels_000010_0B1265A4": [ "cell.entry_alert_levels_000012_51A22C3D", "cell.entry_alert_levels_000013_3D1455AF", "cell.entry_alert_levels_000014_3BB8B849" ] }, { "row.row_alert_levels_000016_A026A00F": [ "cell.entry_alert_levels_000017_095FD5FF", "cell.entry_alert_levels_000018_8F89BA8E", "cell.entry_alert_levels_000019_F03F903B" ] }, { "row.row_alert_levels_00001B_86CC4389": [ "cell.entry_alert_levels_00001C_A13DB97F", "cell.entry_alert_levels_00001D_A24C529A", "cell.entry_alert_levels_00001E_F69D75F6" ] }, { "row.row_alert_levels_000021_3989F670": [ "cell.entry_alert_levels_000022_3AE852BA", "cell.entry_alert_levels_000023_5AB5C038", "cell.entry_alert_levels_000024_46149613" ] }, { "row.row_alert_levels_000027_9CDFAF2E": [ "cell.entry_alert_levels_000028_9D28ED72", "cell.entry_alert_levels_000029_E6A7BBA5", "cell.entry_alert_levels_00002A_B12AC69A" ] }, { "row.row_alert_levels_00002D_09632057": [ "cell.entry_alert_levels_00002E_D04C71FB", "cell.entry_alert_levels_00002F_A006333B", "cell.entry_alert_levels_000030_45DF576D" ] } ] } ] }, "services_and_logs-latest-en.json": { "title": "title_services_and_logs_000001_E5BCB", "title_services_and_logs_000001_E5BCB": "Services and logs", "shortdesc": "shortdesc_services_and_logs_000002_C3E46", "shortdesc_services_and_logs_000002_C3E46": "Lists of services and logs that the product uses. ", "content.p_services_and_logs_00000F_7FDA5": "The following topics list the services installed with the product and the log files that record their activity. Use these references to identify the services and logs that are relevant when you manage or troubleshoot the product.", "desc": [ "content.p_services_and_logs_00000F_7FDA5" ] }, "services_installed_ls64-latest-en.json": { "title": "title_services_installed_ls64_001A49", "title_services_installed_ls64_001A49": "Services installed with the product", "shortdesc": "shortdesc_services_installed_ls64_0067D0", "shortdesc_services_installed_ls64_0067D0": "The product installs several services that are used to handle various product features. ", "content.title_services_installed_ls64_006F94": "Installed services", "content.p_services_installed_ls64_0057C4": "", "content.note_services_installed_ls64_0092B7": "Note: The services listed here are subject to change without advance notice.", "content.p_services_installed_ls64_00C273": "", "content.note_services_installed_ls64_001FE2": "Important: Do not manually start or stop any of the services listed here.", "content.title_services_installed_ls64_00046F": "Active services", "content.dt_services_installed_ls64_00DDDA": "f-secure-baseguard-accd.service ", "content.dd_services_installed_ls64_00FE59": "Real-time scanner service that handles file access notifications.", "content.dt_services_installed_ls64_0094D2": "f-secure-baseguard-as.service ", "content.dd_services_installed_ls64_00951C": "A BaseGuard facility for email spam scanning.", "content.note_services_installed_ls64_00258D": "Note: As of linuxsecurity channel version 12.0.286, this service is no longer running.
", "content.dt_services_installed_ls64_002156": "f-secure-baseguard-cleanup.service ", "content.dd_services_installed_ls64_00B2AC": "Makes sure that older channel updates are cleaned up to save disk space.", "content.dt_services_installed_ls64_009360": "f-secure-baseguard-doormand.service ", "content.dd_services_installed_ls64_00A927": "Helps handle subscriptions, registration and cloud service lookups.", "content.dt_services_installed_ls64_00947B": "f-secure-baseguard-icap.service ", "content.dd_services_installed_ls64_004AC0": "The malware analysis service used for realtime, scheduled and manual scanning.", "content.dt_services_installed_ls64_00A628": "f-secure-baseguard-telemetry.service ", "content.dd_services_installed_ls64_00E153": "Collects information for monitoring and analysis to keep the product features working as they should.", "content.dt_services_installed_ls64_0090D6": "f-secure-baseguard-tokenverify.service ", "content.dd_services_installed_ls64_007264": "An OAuth 2 authentication manager used with HTTP APIs.
", "content.dd_services_installed_ls64_00C94B": "This service is running, but is not used by the product.", "content.dt_services_installed_ls64_00DC1B": "fsbg-hotfixctl.service", "content.dd_services_installed_ls64_008A03": "WithSecure hotfix service that checks if there are hotfixes available.
", "content.dd_services_installed_ls64_00533D": "Usually in an inactive state.", "content.dt_services_installed_ls64_00F16E": "fsbg-hotfixctl.timer", "content.dd_services_installed_ls64_00E3A6": "WithSecure hotfix service timer.
", "content.dd_services_installed_ls64_001DCE": "Runs fsbg-hotfixctl.service to check hotfixes once per hour.", "content.dt_services_installed_ls64_004D8B": "f-secure-linuxsecurity-fsicd.service ", "content.dd_services_installed_ls64_00ADC9": "Maintains the file integrity checker baseline.", "content.dt_services_installed_ls64_00C186": "f-secure-linuxsecurity-scand.service ", "content.dd_services_installed_ls64_00AF16": "Manages manual and scheduled scans.", "content.dt_services_installed_ls64_00E07A": "f-secure-linuxsecurity-lspmd.service ", "content.dd_services_installed_ls64_0021BA": "Locally distributes centrally managed settings to product services.", "content.dt_services_installed_ls64_001D21": "f-secure-linuxsecurity-statusd.service ", "content.dd_services_installed_ls64_00BB01": "Collects status and statistics information from product services and relays them to the central management agent (fsma2).", "content.dt_services_installed_ls64_00CCA0": "f-secure-linuxsecurity-webserver.service ", "content.dd_services_installed_ls64_000E85": "Provides an internal interface for centrally managed settings.", "content.dt_services_installed_ls64_00FD54": "fsbg-pmd.service ", "content.dd_services_installed_ls64_005F62": "Locally distributes centrally managed settings to BaseGuard services.", "content.dt_services_installed_ls64_006B5A": "fsbg-statusd.service ", "content.dd_services_installed_ls64_0071E9": "Collects status and statistics information from BaseGuard services and relays them to the central management agent (fsma2).", "content.dt_services_installed_ls64_008600": "fsbg-updated.service ", "content.dd_services_installed_ls64_00BEFE": "Schedules the installation of online channel updates.", "content.dt_services_installed_ls64_001093": "fsma2.service ", "content.dd_services_installed_ls64_009AFA": "Handles centrally managed settings and communication (for example, with Policy Manager or F-Secure Elements Endpoint Protection).", "content.title_services_installed_ls64_004D79": "Inactive services", "content.p_services_installed_ls64_002CE2": "These services are included during installation, but are not loaded by the product.", "content.dt_services_installed_ls64_000FFE": "f-secure-baseguard-authorize.service ", "content.dd_services_installed_ls64_000B33": "An OAuth 2 authorization server used with HTTP APIs.", "content.dt_services_installed_ls64_00A347": "f-secure-baseguard-sensor.service ", "content.dd_services_installed_ls64_000F39": "Handles the functionality of WithSecure Elements Endpoint Detection and Response. If the Endpoint Detection and Response feature is enabled for the subscription key in use, this service is active, but it is inactive by default.", "content.dt_services_installed_ls64_00E015": "f-secure-linuxsecurity-rmmd.service ", "content.dd_services_installed_ls64_009A97": "Provides status information for 3rd party RMM systems.", "content.dt_services_installed_ls64_00E612": "fsbg-enable-platform-selinux-policy.service ", "content.dd_services_installed_ls64_00D9C5": "Turns on the SELinux confinement for product services to restrict their access to resources and actions based on the policies that are defined in the SELinux configuration.", "content.dt_services_installed_ls64_00CE25": "fsbg-disable-platform-selinux-policy.service ", "content.dd_services_installed_ls64_005E3C": "Turns off the SELinux confinement for product services so that their access is not restricted.", "content.note_services_installed_ls64_0086C3": "Note: Both fsbg-{enable,disable}-platform-selinux-policy.service services are normally inactive, but on SELinux-capable systems, they may run temporarily after the initial product installation or after changes are made to the product configuration.", "desc": [ "content.title_services_installed_ls64_006F94", "content.note_services_installed_ls64_0092B7", "content.note_services_installed_ls64_001FE2", "content.title_services_installed_ls64_00046F", { "dl.dl_services_installed_ls64_00A3BC": [ { "dlentry.dlentry_services_installed_ls64_007425": [ "content.dt_services_installed_ls64_00DDDA", "content.dd_services_installed_ls64_00FE59" ] }, { "dlentry.dlentry_services_installed_ls64_004A33": [ "content.dt_services_installed_ls64_0094D2", "content.dd_services_installed_ls64_00951C", "content.note_services_installed_ls64_00258D" ] }, { "dlentry.dlentry_services_installed_ls64_000ABC": [ "content.dt_services_installed_ls64_002156", "content.dd_services_installed_ls64_00B2AC" ] }, { "dlentry.dlentry_services_installed_ls64_007799": [ "content.dt_services_installed_ls64_009360", "content.dd_services_installed_ls64_00A927" ] }, { "dlentry.dlentry_services_installed_ls64_00A621": [ "content.dt_services_installed_ls64_00947B", "content.dd_services_installed_ls64_004AC0" ] }, { "dlentry.dlentry_services_installed_ls64_001768": [ "content.dt_services_installed_ls64_00A628", "content.dd_services_installed_ls64_00E153" ] }, { "dlentry.dlentry_services_installed_ls64_006F35": [ "content.dt_services_installed_ls64_0090D6", "content.dd_services_installed_ls64_007264", "content.dd_services_installed_ls64_00C94B" ] }, { "dlentry.dlentry_services_installed_ls64_00A617": [ "content.dt_services_installed_ls64_00DC1B", "content.dd_services_installed_ls64_008A03", "content.dd_services_installed_ls64_00533D" ] }, { "dlentry.dlentry_services_installed_ls64_00A330": [ "content.dt_services_installed_ls64_00F16E", "content.dd_services_installed_ls64_00E3A6", "content.dd_services_installed_ls64_001DCE" ] }, { "dlentry.dlentry_services_installed_ls64_005617": [ "content.dt_services_installed_ls64_004D8B", "content.dd_services_installed_ls64_00ADC9" ] }, { "dlentry.dlentry_services_installed_ls64_009608": [ "content.dt_services_installed_ls64_00C186", "content.dd_services_installed_ls64_00AF16" ] }, { "dlentry.dlentry_services_installed_ls64_00B792": [ "content.dt_services_installed_ls64_00E07A", "content.dd_services_installed_ls64_0021BA" ] }, { "dlentry.dlentry_services_installed_ls64_00A790": [ "content.dt_services_installed_ls64_001D21", "content.dd_services_installed_ls64_00BB01" ] }, { "dlentry.dlentry_services_installed_ls64_00C8FB": [ "content.dt_services_installed_ls64_00CCA0", "content.dd_services_installed_ls64_000E85" ] }, { "dlentry.dlentry_services_installed_ls64_00CD70": [ "content.dt_services_installed_ls64_00FD54", "content.dd_services_installed_ls64_005F62" ] }, { "dlentry.dlentry_services_installed_ls64_00D01E": [ "content.dt_services_installed_ls64_006B5A", "content.dd_services_installed_ls64_0071E9" ] }, { "dlentry.dlentry_services_installed_ls64_0061F2": [ "content.dt_services_installed_ls64_008600", "content.dd_services_installed_ls64_00BEFE" ] }, { "dlentry.dlentry_services_installed_ls64_0074D4": [ "content.dt_services_installed_ls64_001093", "content.dd_services_installed_ls64_009AFA" ] } ] }, "content.title_services_installed_ls64_004D79", "content.p_services_installed_ls64_002CE2", { "dl.dl_services_installed_ls64_00BF1F": [ { "dlentry.dlentry_services_installed_ls64_007D4C": [ "content.dt_services_installed_ls64_000FFE", "content.dd_services_installed_ls64_000B33" ] }, { "dlentry.dlentry_services_installed_ls64_00349B": [ "content.dt_services_installed_ls64_00A347", "content.dd_services_installed_ls64_000F39" ] }, { "dlentry.dlentry_services_installed_ls64_00DCEF": [ "content.dt_services_installed_ls64_00E015", "content.dd_services_installed_ls64_009A97" ] }, { "dlentry.dlentry_services_installed_ls64_000ACB": [ "content.dt_services_installed_ls64_00E612", "content.dd_services_installed_ls64_00D9C5" ] }, { "dlentry.dlentry_services_installed_ls64_001CE5": [ "content.dt_services_installed_ls64_00CE25", "content.dd_services_installed_ls64_005E3C" ] } ] }, "content.note_services_installed_ls64_0086C3" ] }, "log_files-latest-en.json": { "title": "title_log_files_000001_24FF1A28", "title_log_files_000001_24FF1A28": "Logs used by the product", "shortdesc": "shortdesc_log_files_000002_00893A0B", "shortdesc_log_files_000002_00893A0B": "The product uses several logs for various product features. ", "content.note_log_files_000010_1291365E": "Note: The format and contents of logs listed here are subject to change without advance notice.", "content.dt_log_files_000013_43423056": "systemd journal / syslog ", "content.dd_log_files_000014_104C8468": "All services log events into the syslog.", "content.dt_log_files_000016_EA693E4F": "access.log ", "content.dd_log_files_000017_14F31069": "Records all log entries caused by scanning.", "content.dt_log_files_000019_2E1601C9": "fsicapd.log ", "content.dd_log_files_00001A_6E8C1EE7": "Records errors from the scanning service.", "content.dt_log_files_00001C_A255FD2B": "update.log ", "content.dd_log_files_00001D_6A62E284": "Records information related to updates.", "desc": [ "content.note_log_files_000010_1291365E", { "dl.dl_log_files_000011_61542A52": [ { "dlentry.dlentry_log_files_000012_7CB9E7D1": [ "content.dt_log_files_000013_43423056", "content.dd_log_files_000014_104C8468" ] }, { "dlentry.dlentry_log_files_000015_787CC4D2": [ "content.dt_log_files_000016_EA693E4F", "content.dd_log_files_000017_14F31069" ] }, { "dlentry.dlentry_log_files_000018_14229388": [ "content.dt_log_files_000019_2E1601C9", "content.dd_log_files_00001A_6E8C1EE7" ] }, { "dlentry.dlentry_log_files_00001B_D0CC6B27": [ "content.dt_log_files_00001C_A255FD2B", "content.dd_log_files_00001D_6A62E284" ] } ] } ] }, "cloud_services-latest-en.json": { "title": "title_cloud_services_000001_86ECB78D", "title_cloud_services_000001_86ECB78D": "Cloud services", "shortdesc": "shortdesc_cloud_services_000002_EC1D25F9", "shortdesc_cloud_services_000002_EC1D25F9": "The product connects to various services over the network, for example to check for updates to malware definitions. ", "content.p_cloud_services_00000B_6453FDE0": "The product may need to access any subdomain within the fsapi.com domain. Ensure it can connect to all addresses under *.fsapi.com.", "content.note_cloud_services_00000E_B4CD83E3": "Note: More detailed information about network addresses can be found in the WithSecure Community page.", "desc": [ "content.p_cloud_services_00000B_6453FDE0", "content.note_cloud_services_00000E_B4CD83E3" ] }, "toc-latest-en.json": { "toc": [ "product_webhelp-latest-en", { "welcome-latest-en": [ "sys_reqs-latest-en", "how_product_works-latest-en", "features_and_benefits-latest-en", { "what_is_harmful_content-latest-en": [ "viruses-latest-en", "potentially_unwanted-latest-en", "worms-latest-en", "trojans-latest-en", "backdoors-latest-en", "exploits-latest-en", "exploit_kits-latest-en", "rootkits-latest-en" ] } ] }, { "installation-latest-en": [ { "concept_opg_mn3_b1c-latest-en": [ "installing_psb-latest-en", "task_fqp_l43_b1c-latest-en", "task_nqm_ms3_b1c-latest-en", "delaying_product_activation-latest-en", "task_activating_via_connector_proxy-latest-en" ] }, { "migrating_ls64_to_elements-latest-en": [ "inspecting_migration_status-latest-en", "migrating_ls64_to_withsecure_elements-latest-en", "associating_migrated_devies_with_a_profile-latest-en" ] }, "uninstalling_product-latest-en" ] }, { "administering_psb-latest-en": [ "psb_basics-latest-en", { "configuring_settings-latest-en": [ "lsctl_setting_types-latest-en", "lsctl_operating_with_settings-latest-en", "lsctl_input_output_formats-latest-en", "lsctl_working_with_arrays-latest-en", "loading_product_settings_from_file-latest-en", "inspecting_product_state-latest-en", { "settings_real_time_scanning-latest-en": [ "settings_manual_scheduled_scanning-latest-en", "orsp_settings-latest-en" ] }, "settings_integrity_checking-latest-en", "settings_offload_scanning-latest-en", { "settings_automatic_updates-latest-en": [ "http_proxy_settings-latest-en" ] } ] }, { "malware_scanning-latest-en": [ "real_time_scanning-latest-en", "manual_scanning-latest-en", "scheduled_scanning-latest-en" ] }, "integrity_checking-latest-en", "checking_client_status-latest-en", "aua-latest-en", "using_http_proxies-latest-en", "lsctl_example_managing_ic_profiles-latest-en", { "command_line_usage-latest-en": [ "starting_stopping_services-latest-en", "scanning_manually-latest-en", "updating_the_product_manually_from_the_command_line-latest-en", "testing_av-latest-en", "integrity_checker_command_line-latest-en" ] } ] }, "alert_levels-latest-en", { "services_and_logs-latest-en": [ "services_installed_ls64-latest-en", "log_files-latest-en" ] }, "cloud_services-latest-en" ], "product_webhelp-latest-en": "Linux Protection ", "sys_reqs-latest-en": "System requirements", "how_product_works-latest-en": "How the product works ", "features_and_benefits-latest-en": "Key features and benefits ", "viruses-latest-en": "Viruses", "potentially_unwanted-latest-en": "Potentially unwanted applications (PUA) and unwanted applications (UA)", "worms-latest-en": "Worms", "trojans-latest-en": "Trojans", "backdoors-latest-en": "Backdoors", "exploits-latest-en": "Exploits", "exploit_kits-latest-en": "Exploit kits", "rootkits-latest-en": "Rootkits", "what_is_harmful_content-latest-en": "What is harmful content", "welcome-latest-en": "Introduction ", "installing_psb-latest-en": "Installing the product for use with WithSecure Elements Endpoint Protection", "task_fqp_l43_b1c-latest-en": "Installing the product using a DEB or RPM package", "task_nqm_ms3_b1c-latest-en": "Installing the product using a generic installer package", "delaying_product_activation-latest-en": "Delaying product activation", "task_activating_via_connector_proxy-latest-en": "Activating Linux Security through an Elements Connector proxy", "concept_opg_mn3_b1c-latest-en": "Installing the product for use with WithSecure Elements Endpoint Protection", "inspecting_migration_status-latest-en": "Inspecting the migration status", "migrating_ls64_to_withsecure_elements-latest-en": "Migrating Linux Security 64 to WithSecure Elements", "associating_migrated_devies_with_a_profile-latest-en": "Assigning profile to migrated devices", "migrating_ls64_to_elements-latest-en": "Migrating from Business Suite to WithSecure Elements", "uninstalling_product-latest-en": "Uninstalling the product", "installation-latest-en": "Installation", "psb_basics-latest-en": "Basics of using the WithSecure Elements Endpoint Protection portal", "lsctl_setting_types-latest-en": "Setting types and the settings tree", "lsctl_operating_with_settings-latest-en": "Operating with settings", "lsctl_input_output_formats-latest-en": "Input and output formats", "lsctl_working_with_arrays-latest-en": "Working with arrays", "loading_product_settings_from_file-latest-en": "Loading product settings from a file", "inspecting_product_state-latest-en": "Inspecting the state of the product", "settings_manual_scheduled_scanning-latest-en": "Settings for manual and scheduled scanning", "orsp_settings-latest-en": "ORSP settings", "settings_real_time_scanning-latest-en": "Command-line settings for real-time scanning", "settings_integrity_checking-latest-en": "Command-line settings for integrity checking", "settings_offload_scanning-latest-en": "Command-line settings for offload scanning", "http_proxy_settings-latest-en": "HTTP proxy settings", "settings_automatic_updates-latest-en": "Command-line settings for automatic updates", "configuring_settings-latest-en": "Configuring settings with the lsctl utility", "real_time_scanning-latest-en": "Real-time scanning", "manual_scanning-latest-en": "Manual scanning", "scheduled_scanning-latest-en": "Scheduled scanning", "malware_scanning-latest-en": "Malware scanning", "integrity_checking-latest-en": "Integrity checking ", "checking_client_status-latest-en": "Checking client status", "aua-latest-en": "Automatic updates ", "using_http_proxies-latest-en": "Using HTTP proxies", "lsctl_example_managing_ic_profiles-latest-en": "Example: managing integrity checker profiles", "starting_stopping_services-latest-en": "Starting and stopping services", "scanning_manually-latest-en": "Scanning the computer manually from the command line", "updating_the_product_manually_from_the_command_line-latest-en": "Updating the product manually from the command line", "testing_av-latest-en": "Testing the antivirus protection ", "integrity_checker_command_line-latest-en": "Running the integrity checker from the command line", "command_line_usage-latest-en": "Command line usage", "administering_psb-latest-en": "Using the product", "alert_levels-latest-en": "Alert severity levels ", "services_installed_ls64-latest-en": "Services installed with the product", "log_files-latest-en": "Logs used by the product", "services_and_logs-latest-en": "Services and logs", "cloud_services-latest-en": "Cloud services" } }