Skip to content

Commit 25a195a

Browse files
Update mde-linux-prerequisites.md for fapolicyd support
FAPolicyD and MDE Linux can co-exist and it is evaluated with recent efforts.
1 parent 135eebf commit 25a195a

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

defender-endpoint/mde-linux-prerequisites.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -121,8 +121,10 @@ The following Linux server distributions and x64 (AMD64/EM64T) versions are supp
121121
122122
> [!WARNING]
123123
> Running Defender for Endpoint on Linux with other fanotify-based security solutions isn't supported. It can lead to unpredictable results, including hanging the operating system.
124-
> If there are any other applications on the system that use fanotify in blocking mode, applications are listed in the conflicting_applications field of the mdatp health command output.
125-
> The Linux FAPolicyD feature uses fanotify in blocking mode, and is therefore unsupported when running Defender for Endpoint in active mode. You can still safely take advantage of Defender for Endpoint on Linux EDR functionality after configuring the antivirus functionality Real Time Protection Enabled to passive mode. See [Enforcement level for Microsoft Defender Antivirus](/defender-endpoint/linux-preferences#enforcement-level-for-microsoft-defender-antivirus).
124+
> If there are any other applications on the system that use fanotify in blocking mode, applications are listed in the conflicting_applications field of the mdatp health command output.
125+
> You can still safely take advantage of Defender for Endpoint on Linux EDR functionality after configuring the antivirus functionality Real Time Protection Enabled to passive mode. See  [Enforcement level for Microsoft Defender Antivirus](/defender-endpoint/linux-preferences#enforcement-level-for-microsoft-defender-antivirus).
126+
>
127+
> **The Linux FAPolicyD is an exception in this. It is supported with Linux Defender for Endpoint on RHEL & FEDORA platforms.**
126128
## Supported filesystems for real-time protection and quick, full, and custom scans
127129

128130
|Real-time protection and quick/full scans|Custom scans|

0 commit comments

Comments
 (0)