Cisco Bug: CSCvs45576 - Scanning remote filesystem that requires authentication can cause ampdaemon process to crash
Dec 16, 2019
- Cisco AMP for Endpoints
Known Affected Releases
Symptom: The Linux Connector's ampdaemon process crashes unexpectedly. The ampdaemon.log file contains the error message: FS monitor fatal error: read failed: Permission denied Conditions: The AMP Connector attempted to access a file for which it does not have permission. This can occur if the file is on a remote filesystem that requires authentication (e.g., CIFS with Kerberos authentication). The Connector fails to recover gracefully and generates a fatal error, causing the ampdaemon process to restart.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases