You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/microsoft-defender-endpoint-linux.md
+16-14Lines changed: 16 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,7 +15,7 @@ ms.collection:
15
15
ms.topic: conceptual
16
16
ms.subservice: linux
17
17
search.appverid: met150
18
-
ms.date: 09/09/2024
18
+
ms.date: 09/10/2024
19
19
---
20
20
21
21
# Microsoft Defender for Endpoint on Linux
@@ -72,9 +72,7 @@ In general you need to take the following steps:
72
72
73
73
> [!NOTE]
74
74
> It is not supported to install Microsoft Defender for Endpoint in any other location other than the default install path.
75
-
>
76
-
> Microsoft Defender for Endpoint on Linux creates an "mdatp" user with random UID and GID. If you want to control the UID and GID, create an "mdatp" user prior to installation using the "/usr/sbin/nologin" shell option.
77
-
> For example: `mdatp:x:UID:GID::/home/mdatp:/usr/sbin/nologin`.
75
+
> Microsoft Defender for Endpoint on Linux creates an `mdatp` user with random UID and GID. If you want to control the UID and GID, create an `mdatp` user prior to installation using the `/usr/sbin/nologin` shell option. Here's an example: `mdatp:x:UID:GID::/home/mdatp:/usr/sbin/nologin`.
78
76
79
77
### System requirements
80
78
@@ -96,6 +94,7 @@ In general you need to take the following steps:
96
94
- Ubuntu 18.04 LTS
97
95
- Ubuntu 20.04 LTS
98
96
- Ubuntu 22.04 LTS
97
+
- Ubuntu 24.04 LTS
99
98
- Debian 9 - 12
100
99
- SUSE Linux Enterprise Server 12 or higher
101
100
- SUSE Linux Enterprise Server 15 or higher
@@ -111,11 +110,11 @@ In general you need to take the following steps:
111
110
- Alma 9.2 and higher
112
111
- Mariner 2
113
112
114
-
> [!NOTE]
115
-
> Distributions and version that are not explicitly listed are unsupported (even if they are derived from the officially supported distributions).
116
-
> With RHEL 6 support for 'extended end of life' coming to an end by June 30, 2024; MDE Linux support for RHEL 6 will also be deprecated by June 30, 2024
117
-
> MDE Linux version 101.23082.0011 is the last MDE Linux release supporting RHEL 6.7 or higher versions (does not expire before June 30, 2024). Customers are advised to plan upgrades to their RHEL 6 infrastructure aligned with guidance from Red Hat.
118
-
> Microsoft Defender Vulnerablity Management is not supported on Rocky and Alma currently.
113
+
> [!NOTE]
114
+
> Distributions and version that are not explicitly listed are unsupported (even if they are derived from the officially supported distributions).
115
+
> With RHEL 6 support for 'extended end of life' coming to an end by June 30, 2024; Defender for Endpoint on Linux support for RHEL 6 will also be deprecated by June 30, 2024
116
+
> Defender for Endpoint on Linux version `101.23082.0011` is the last Defender for Endpoint on Linux release supporting RHEL 6.7 or higher versions (does not expire before June 30, 2024). Customers are advised to plan upgrades to their RHEL 6 infrastructure aligned with guidance from Red Hat.
117
+
> Microsoft Defender Vulnerablity Management is not supported on Rocky and Alma currently.
119
118
120
119
- List of supported kernel versions
121
120
@@ -124,6 +123,7 @@ In general you need to take the following steps:
124
123
> Microsoft Defender for Endpoint for all other supported distributions and versions is kernel-version-agnostic. With a minimal requirement for the kernel version to be at or greater than 3.10.0-327.
125
124
126
125
- The `fanotify` kernel option must be enabled
126
+
127
127
- Red Hat Enterprise Linux 6 and CentOS 6:
128
128
- For 6.7: 2.6.32-573.* (except 2.6.32-573.el6.x86_64)
129
129
- For 6.8: 2.6.32-642.*
@@ -197,14 +197,16 @@ After you've enabled the service, you need to configure your network or firewall
197
197
- /opt/microsoft/mdatp/sbin/wdavdaemon requires executable permission. For more information, see "Ensure that the daemon has executable permission" in [Troubleshoot installation issues for Microsoft Defender for Endpoint on Linux](linux-support-install.md).
198
198
199
199
### External package dependency
200
+
200
201
The following external package dependencies exist for the mdatp package:
- For RHEL6 the mdatp RPM package requires `audit`, `policycoreutils`, `libselinux`, `mde-netfilter`
205
+
- For DEBIAN the mdatp package requires `libc6 >= 2.23`, `uuid-runtime`, `auditd`, `mde-netfilter`
204
206
205
207
The mde-netfilter package also has the following package dependencies:
206
-
- For DEBIAN the mde-netfilter package requires "libnetfilter-queue1", "libglib2.0-0"
207
-
- For RPM the mde-netfilter package requires "libmnl", "libnfnetlink", "libnetfilter_queue", "glib2"
208
+
- For DEBIAN the mde-netfilter package requires `libnetfilter-queue1`, `libglib2.0-0`
209
+
- For RPM the mde-netfilter package requires `libmnl`, `libnfnetlink`, `libnetfilter_queue`, `glib2`
208
210
209
211
If the Microsoft Defender for Endpoint installation fails due to missing dependencies errors, you can manually download the pre-requisite dependencies.
0 commit comments