Skip to content

Commit 130fe1d

Browse files
authored
Update Linux prerequisites for Defender for Endpoint
Clarified dependency requirements for various versions of Defender for Endpoint on Linux, including changes regarding eBPF support and removal of uuid-runtime as a dependency.
1 parent 10c3aac commit 130fe1d

File tree

1 file changed

+4
-9
lines changed

1 file changed

+4
-9
lines changed

defender-endpoint/mde-linux-prerequisites.md

Lines changed: 4 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -178,20 +178,15 @@ If the Microsoft Defender for Endpoint installation fails due to missing depende
178178
- For DEBIAN the mdatp package requires `libc6 >= 2.23`.
179179

180180
> [!NOTE]
181+
> For versions 101.25042.0003 and later, no external dependencies are required, whereas versions older than 101.25032.0000 require additional packages:
182+
> - RPM-based distributions: `mde-netfilter`, `pcre`, `libmnl`, `libnfnetlink`, `libnetfilter_queue`, `glib2`
183+
> - DEBIAN-based distributions: `mde-netfilter`, `libpcre3`, `libnetfilter-queue1`, `libglib2.0-0`
181184
> Beginning with version `101.24082.0004`, Defender for Endpoint on Linux no longer supports the `Auditd` event provider. We're transitioning completely to the more efficient eBPF technology.
182185
> If eBPF isn't supported on your machines, or if there are specific requirements to remain on Auditd, and your machines are using Defender for Endpoint on Linux version `101.24072.0001` or older, the following additional dependency on the auditd package exists for mdatp:
183186
> - The mdatp RPM package requires `audit`, `semanage`.
184187
> - For DEBIAN, the mdatp package requires `auditd`.
185188
> - For Mariner, the mdatp package requires `audit`.
186-
>
187-
> For versions older than `101.25032.0000`, the following requirements apply:
188-
> - RPM package needs: `mde-netfilter` and `pcre`
189-
> - DEBIAN package needs: `mde-netfilter` and `libpcre3`
190-
>
191-
> Beginning with version `101.25042.0003`, uuid-runtime is no longer required as an external-dependency.
192-
> The `mde-netfilter` package also has the following package dependencies:
193-
> - For DEBIAN, the `mde-netfilter` package requires `libnetfilter-queue1` and `libglib2.0-0`
194-
> - For RPM, the `mde-netfilter` package requires `libmnl`, `libnfnetlink`, `libnetfilter_queue`, and `glib2`
189+
195190

196191
## Installation instructions
197192

0 commit comments

Comments
 (0)