Sophos Endpoint Security and Control network startup guide: NetWare edition
25 Protect Linux computers
To protect Linux computers, you must:
■ Create a deployment package.
■ Install Sophos Anti-Virus on the Linux computer(s).
Note: These instructions assume that you downloaded Sophos Anti-Virus for Linux when you set up your library. If not, open the library and follow the instructions in the following sections:
Select the software you want to download
(page 16),
Select where you will place downloads
(page
17), and
Download software (page 19).
25.1 Create a deployment package
You can use the mkinstpkg script to create a deployment package for your end-users. This script prompts you for information about how Sophos Anti-Virus will be installed on your Linux computers, and the answers gathered are inserted into the deployment package. When the end-user installs from this deployment package, it will not prompt for any information and will set up both the update location and credentials correctly. You can create a package in tar or RPM format.
Note: The mkinstpkg script is for use within your organization only. Please read the license agreement and legal notice displayed by the mkinstpkg script.
1. Log on to your Linux server as root.
2. Mount the shared directory on the NetWare server that contains the central installation directories (CIDs), using the following syntax (the commands should each be all on one line): mkdir -p /mnt/SWEEP ncpmount -S <NetWare server> -U <username> -P <password> -V
SYS:/SWEEP -m -A <fully qualified distinguished name of
NetWare server> /mnt/SWEEP where <username> and <password> are the credentials needed to access the NetWare server. For example: mkdir -p /mnt/SWEEP ncpmount -S netware6 -U admin -P opensesame -V SYS:/SWEEP -m
-A netware6.domain.com /mnt/SWEEP
(To enable this directory to be mounted automatically on system boot, use distribution-specific tools for doing so, or edit fstab.)
3. Change to the Sophos Anti-Virus for Linux CID, savlinux: cd /mnt/SWEEP/savlinux
51
Sophos Endpoint Security and Control network startup guide: NetWare edition
4. To create the package, do as follows:
■ To create a deployment package in tar format, called savinstpkg.tgz, run
./mkinstpkg.sh
■ To create a deployment package in RPM format, called savinstpkg-0.0-1.i586.rpm, run
./mkinstpkg.sh -r
Note: The filename might differ depending on the RPM setup.
5. When prompted for the location, enter the location of the CID (as seen from the Linux computers).
Now you are ready to install Sophos Anti-Virus using this deployment package.
25.2 Install Sophos Anti-Virus using the deployment package
You use the package to install Sophos Anti-Virus in one of two ways:
■ Automatically across the network. This approach can be used only with a package in RPM format.
■ Manually on each computer. This approach can be used with a package in RPM or tar format.
25.2.1 Install Sophos Anti-Virus manually
You can install Sophos Anti-Virus manually as follows:
1. Use your own tools to copy the deployment package to the computers where you want to install
Sophos Anti-Virus.
2. Go to each computer and log in as root.
3. Ensure that root is able to access the CID, for example, by using the command mount.
4. Place the deployment package in a temporary directory and change to that directory.
5. To perform the installation, do as follows:
■ To untar the tar package and run the manual update script, enter tar -zxvf savinstpkg.tgz ./sophos-av/install.sh
■ To install from the RPM package, enter rpm -i <RPM package>
This copies the necessary files from the server and installs Sophos Anti-Virus. From now on,
Sophos Anti-Virus will be updated automatically whenever the CID is updated.
52
Sophos Endpoint Security and Control network startup guide: NetWare edition
25.2.2 Install Sophos Anti-Virus automatically
You can install Sophos Anti-Virus automatically from the deployment package by using one of the Linux administration tools that support remote deployment. Refer to the documentation for that tool.
Once Sophos Anti-Virus is installed, it will be started and will be updated automatically whenever the CID is updated.
53
