Skip to content

Commit 50c6030

Browse files
authored
Merge pull request #1307 from meghapriyams/docs-editor/microsoft-defender-endpoint-li-1725950517
Update microsoft-defender-endpoint-linux.md
2 parents 18ca488 + e64ee94 commit 50c6030

File tree

1 file changed

+16
-14
lines changed

1 file changed

+16
-14
lines changed

defender-endpoint/microsoft-defender-endpoint-linux.md

Lines changed: 16 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.collection:
1515
ms.topic: conceptual
1616
ms.subservice: linux
1717
search.appverid: met150
18-
ms.date: 09/09/2024
18+
ms.date: 09/10/2024
1919
---
2020

2121
# Microsoft Defender for Endpoint on Linux
@@ -72,9 +72,7 @@ In general you need to take the following steps:
7272

7373
> [!NOTE]
7474
> It is not supported to install Microsoft Defender for Endpoint in any other location other than the default install path.
75-
>
76-
> Microsoft Defender for Endpoint on Linux creates an "mdatp" user with random UID and GID. If you want to control the UID and GID, create an "mdatp" user prior to installation using the "/usr/sbin/nologin" shell option.
77-
> For example: `mdatp:x:UID:GID::/home/mdatp:/usr/sbin/nologin`.
75+
> Microsoft Defender for Endpoint on Linux creates an `mdatp` user with random UID and GID. If you want to control the UID and GID, create an `mdatp` user prior to installation using the `/usr/sbin/nologin` shell option. Here's an example: `mdatp:x:UID:GID::/home/mdatp:/usr/sbin/nologin`.
7876
7977
### System requirements
8078

@@ -96,6 +94,7 @@ In general you need to take the following steps:
9694
- Ubuntu 18.04 LTS
9795
- Ubuntu 20.04 LTS
9896
- Ubuntu 22.04 LTS
97+
- Ubuntu 24.04 LTS
9998
- Debian 9 - 12
10099
- SUSE Linux Enterprise Server 12 or higher
101100
- SUSE Linux Enterprise Server 15 or higher
@@ -111,11 +110,11 @@ In general you need to take the following steps:
111110
- Alma 9.2 and higher
112111
- Mariner 2
113112

114-
> [!NOTE]
115-
> Distributions and version that are not explicitly listed are unsupported (even if they are derived from the officially supported distributions).
116-
> With RHEL 6 support for 'extended end of life' coming to an end by June 30, 2024; MDE Linux support for RHEL 6 will also be deprecated by June 30, 2024
117-
> MDE Linux version 101.23082.0011 is the last MDE Linux release supporting RHEL 6.7 or higher versions (does not expire before June 30, 2024). Customers are advised to plan upgrades to their RHEL 6 infrastructure aligned with guidance from Red Hat.
118-
> Microsoft Defender Vulnerablity Management is not supported on Rocky and Alma currently.
113+
> [!NOTE]
114+
> Distributions and version that are not explicitly listed are unsupported (even if they are derived from the officially supported distributions).
115+
> With RHEL 6 support for 'extended end of life' coming to an end by June 30, 2024; Defender for Endpoint on Linux support for RHEL 6 will also be deprecated by June 30, 2024
116+
> Defender for Endpoint on Linux version `101.23082.0011` is the last Defender for Endpoint on Linux release supporting RHEL 6.7 or higher versions (does not expire before June 30, 2024). Customers are advised to plan upgrades to their RHEL 6 infrastructure aligned with guidance from Red Hat.
117+
> Microsoft Defender Vulnerablity Management is not supported on Rocky and Alma currently.
119118
120119
- List of supported kernel versions
121120

@@ -124,6 +123,7 @@ In general you need to take the following steps:
124123
> Microsoft Defender for Endpoint for all other supported distributions and versions is kernel-version-agnostic. With a minimal requirement for the kernel version to be at or greater than 3.10.0-327.
125124
126125
- The `fanotify` kernel option must be enabled
126+
127127
- Red Hat Enterprise Linux 6 and CentOS 6:
128128
- For 6.7: 2.6.32-573.* (except 2.6.32-573.el6.x86_64)
129129
- For 6.8: 2.6.32-642.*
@@ -197,14 +197,16 @@ After you've enabled the service, you need to configure your network or firewall
197197
- /opt/microsoft/mdatp/sbin/wdavdaemon requires executable permission. For more information, see "Ensure that the daemon has executable permission" in [Troubleshoot installation issues for Microsoft Defender for Endpoint on Linux](linux-support-install.md).
198198

199199
### External package dependency
200+
200201
The following external package dependencies exist for the mdatp package:
201-
- The mdatp RPM package requires "glibc >= 2.17", "audit", "policycoreutils", "semanage" "selinux-policy-targeted", "mde-netfilter"
202-
- For RHEL6 the mdatp RPM package requires "audit", "policycoreutils", "libselinux", "mde-netfilter"
203-
- For DEBIAN the mdatp package requires "libc6 >= 2.23", "uuid-runtime", "auditd", "mde-netfilter"
202+
203+
- The mdatp RPM package requires `glibc >= 2.17`, `audit`, `policycoreutils`, `semanage` `selinux-policy-targeted`, `mde-netfilter`
204+
- For RHEL6 the mdatp RPM package requires `audit`, `policycoreutils`, `libselinux`, `mde-netfilter`
205+
- For DEBIAN the mdatp package requires `libc6 >= 2.23`, `uuid-runtime`, `auditd`, `mde-netfilter`
204206

205207
The mde-netfilter package also has the following package dependencies:
206-
- For DEBIAN the mde-netfilter package requires "libnetfilter-queue1", "libglib2.0-0"
207-
- For RPM the mde-netfilter package requires "libmnl", "libnfnetlink", "libnetfilter_queue", "glib2"
208+
- For DEBIAN the mde-netfilter package requires `libnetfilter-queue1`, `libglib2.0-0`
209+
- For RPM the mde-netfilter package requires `libmnl`, `libnfnetlink`, `libnetfilter_queue`, `glib2`
208210

209211
If the Microsoft Defender for Endpoint installation fails due to missing dependencies errors, you can manually download the pre-requisite dependencies.
210212

0 commit comments

Comments
 (0)