New exclusions behavior after installing the Cumulative Patch On Kaspersky Linux Light Agent 5.2 [KSV Light Agent]

[Antipova Anna]

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials.

ATTENTION! All mechanisms described below will be applicable to all further released Cumulative Patches for Kaspersky Linux Light Agent 5.2.

On-Demand Scan exclusion mechanism has not been changed. The following mechanism of exclusions with installed Cumulative Patch for Kaspersky Linux Light Agent 5.2 is applicable to On Access Scanning only.

1. File Scanning Exclusion (an exclusion does not end with ‘/’)

If the option "Include subfolders" is enabled for exclusions from file scan, the label "IGNORE fanotify" will be set for this file. In this case, processing of an object with the excluded file will not be intercepted by Kaspersky Linux Light Agent 5.2 at all.

2. Folder exclusion (an exclusion ends with "/") without the enabled option "Include subfolders"

This exclusion will be processed by Kaspersky Linux Light Agent 5.2 after the excluded folder is intercepted and file operation resolved.

3. Folder exclusion (exclusion ends with "/") with the enabled option "Include subfolders"

This type of exclusion can be split into two processing mechanisms:

• Excluded folder is not a mount point.

This exclusion will be processed by Kaspersky Linux Light Agent 5.2 after the excluded folder is intercepted and file operation resolved.

If one of the subfolders in the excluded folder is a mount point, this subfolder will be ignored and not scanned, without processing this exclusion by Kaspersky Linux Light Agent 5.2. It means that this subfolder is excluded on the low level (fa-notify).

Example:

There is a directory “/path/to/folder” which is not a mount point. The folder “/path/to/folder” has the following subfolders:

• “notmountsubfolder”, which is not a mount point
• "mountsubfolder", which is a mount point

The folder “/path/to/folder” is added to exclusions with the enabled option "Include subfolders". Exclusion of the two subfolders will be processed in the following way:

• Exclusion of subfolder “notmountsubfolder” will be processed by Kaspersky Linux Light Agent 5.2 after its interception and resolving.
• Exclusion of subfolder “mountsubfolder” will be processed without Kaspersky Linux Light Agent 5.2 interception and resolving this subfolder directory, i.e. on the low level (fa-notify) 

•  Excluded folder is a mount point.

In this case this folder and all its subfolders (including the subfolders which might be mount points) will be excluded without Kaspersky Linux Light Agent 5.2 interception and resolving all subfolders, i.e. exclusions are set on the low level (fa-notify).

Local installation: 

1. Copy the *.sh file on the Linux VM with Kaspersky Light Agent 5.2 installed.
2. Grant execution access: chmod +x <path_to_file/*.sh file>
3. Run the command /path_to_file/*.sh --install 

Remote Installation through Kaspersky Security Center: 

1. Create installation package based on the kud file.
2. Create remote installation task and assign it to the Linux VMs with Kaspersky Linux Light Agent 5.2 installed.

The version of Kaspersky Linux Light Agent will be changed to the version specified in the name of the cumulative patch for Kaspersky Linux Light Agent 5.2.