You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/microsoft-defender-endpoint-linux.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -103,18 +103,18 @@ Microsoft Defender for Endpoint for Linux includes anti-malware and endpoint det
103
103
- Oracle Linux 9.x ARM64
104
104
105
105
- SUSE Linux Enterprise Server 15 (SP5, SP6) ARM64
106
-
107
-
> [!IMPORTANT]
106
+
107
+
> [!IMPORTANT]
108
108
> Support for Microsoft Defender for Endpoint on Linux for ARM64-based Linux devices is now in preview. For more information, see [Microsoft Defender for Endpoint on Linux for ARM64-based devices (preview)](mde-linux-arm.md).
109
109
110
-
> [!NOTE]
110
+
> [!NOTE]
111
111
> The workstation versions of these distributions are unsupported.
112
112
> Distributions and versions that aren't explicitly listed are unsupported (even if they're derived from the officially supported distributions).
113
113
> After a new package version is released, support for the previous two versions is reduced to technical support only. Versions older than that which are listed in this section are provided for technical upgrade support only.
114
114
> Currently, Rocky and Alma distributions aren't supported in Microsoft Defender Vulnerability Management.
115
115
> Microsoft Defender for Endpoint for all other supported distributions and versions is kernel-version agnostic. The minimal requirement for the kernel version to be `3.10.0-327` or later.
116
116
117
-
> [!CAUTION]
117
+
> [!CAUTION]
118
118
> Running Defender for Endpoint on Linux side by side with other `fanotify`-based security solutions isn't supported. It can lead to unpredictable results, including hanging the operating system. If there are any other applications on the system that use `fanotify` in blocking mode, applications are listed in the `conflicting_applications` field of the `mdatp health` command output. The Linux **FAPolicyD** feature uses `fanotify` in blocking mode, and is therefore unsupported when running Defender for Endpoint in active mode. You can still safely take advantage of Defender for Endpoint on Linux EDR functionality after configuring the antivirus functionality Real Time Protection Enabled to [Passive mode](linux-preferences.md#enforcement-level-for-antivirus-engine).
119
119
120
120
- List of supported filesystems for RTP, Quick, Full, and Custom Scan.
@@ -146,7 +146,7 @@ Microsoft Defender for Endpoint for Linux includes anti-malware and endpoint det
146
146
> If eBPF isn't supported on your machines, or if there are specific requirements to remain on Auditd, and your machines are using Defender for Endpoint on Linux version `101.24072.0001` or lower, then Audit framework (`auditd`) must be enabled on your system.
147
147
> If you're using Auditd, then system events captured by rules added to `/etc/audit/rules.d/` adds to `audit.log`(s) and might affect host auditing and upstream collection. Events added by Microsoft Defender for Endpoint on Linux are tagged with the `mdatp` key.
148
148
149
-
- /opt/microsoft/mdatp/sbin/wdavdaemon requires executable permission. For more information, see "Ensure that the daemon has executable permission" in [Troubleshoot installation issues for Microsoft Defender for Endpoint on Linux](linux-support-install.md).
149
+
-`/opt/microsoft/mdatp/sbin/wdavdaemon` requires executable permission. For more information, see "Ensure that the daemon has executable permission" in [Troubleshoot installation issues for Microsoft Defender for Endpoint on Linux](linux-support-install.md).
150
150
151
151
### Installation instructions
152
152
@@ -182,7 +182,7 @@ If the Microsoft Defender for Endpoint installation fails due to missing depende
182
182
> - For DEBIAN, the mdatp package requires `auditd`.
183
183
> - For Mariner, the mdatp package requires `audit`.
184
184
185
-
The`mde-netfilter` package also has the following package dependencies:
185
+
The`mde-netfilter` package also has the following package dependencies:
186
186
187
187
- For DEBIAN, the mde-netfilter package requires `libnetfilter-queue1`, and `libglib2.0-0`
188
188
- For RPM, the mde-netfilter package requires `libmnl`, `libnfnetlink`, `libnetfilter_queue`, and `glib2`
0 commit comments