Skip to content

Commit 5b0d862

Browse files
authored
Update mde-linux-prerequisites.md
1 parent 12fed9b commit 5b0d862

1 file changed

Lines changed: 6 additions & 6 deletions

File tree

defender-endpoint/mde-linux-prerequisites.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -113,22 +113,22 @@ The following Linux server distributions are supported:
113113
> Distributions and versions that aren't explicitly listed above are unsupported
114114
> Microsoft Defender for Endpoint is kernel-version agnostic for all other supported distributions and versions. The minimal requirement for the kernel version is `3.10.0-327` or later.
115115
>
116-
> Microsoft Defender for Endpoint on Linux **can be installed and may function** on customized operating systems that meet minimal kernel requirements and are derived from known, standard, vendor‑provided Linux distributions that Microsoft supports. Customers are free to onboard and run Defender for Endpoint on such environments; Microsoft does not block onboarding or execution.
117-
> However, these customized environments aren't part of Microsoft's validated or maintained support baseline. As a result, they are treated as custom OS configurations from a support perspective.
116+
> Microsoft Defender for Endpoint on Linux **can be installed and may function** on customized operating systems that meet minimal kernel requirements and are derived from known, standard, vendor‑provided Linux distributions that Microsoft supports. Customers are free to onboard and run Defender for Endpoint on such environments; Microsoft doesn't block onboarding or execution.
117+
> However, these customized environments aren't part of Microsoft's validated or maintained support baseline. As a result, they're treated as custom OS configurations from a support perspective.
118118
> Customers are expected to validate Defender for Endpoint within these custom environments and, if needed, reproduce issues on a supported, standard (unmodified) Linux distribution. If an issue can't be reproduced on a supported standard base distribution, Microsoft might not be able to proceed with further investigation or remediation.
119119
> For full support coverage and a predictable support experience, customers are recommended to run Defender for Endpoint on a supported, vendor-provided Linux distribution as outlined in the official prerequisites.
120120
121121
> [!WARNING]
122-
> Running Defender for Endpoint on Linux alongside other fanotify-based security solutions is not supported and may lead to unpredictable behavior, including system hangs.
123-
> If any applications use fanotify in blocking mode, they will appear in the conflicting_applications field of the mdatp health command output.
122+
> Running Defender for Endpoint on Linux alongside other Fanotify-based security solutions isn't supported and may lead to unpredictable behavior, including system hangs.
123+
> If any applications use Fanotify in blocking mode, they'll appear in the conflicting_applications field of the mdatp health command output.
124124
> You can still safely take advantage of Defender for Endpoint on Linux by setting antivirus enforcement level to passive. See [Configure security settings in Microsoft Defender for Endpoint on Linux](linux-preferences.md).
125125
> **EXCEPTION:** The Linux `FAPolicyD` feature, which also uses Fanotify in blocking mode, is supported with Defender for Endpoint in active mode on RHEL and Fedora platforms, provided that mdatp health reports a healthy status. This exception is based on validated compatibility specific to these distributions.
126126
127127
## Supported filesystems for real-time protection and quick, full, and custom scans
128128

129129
|Real-time protection and quick/full scans|Custom scans|
130130
|---|---|
131-
|`btrfs`|All filesystems that are supported for real-time protection and quick/full scans are also supported for custom scans. In addtion, the filesystems listed below are also supported for custom scans.|
131+
|`btrfs`|All filesystems that are supported for real-time protection and quick/full scans are also supported for custom scans. In addition, the filesystems listed below are also supported for custom scans.|
132132
|`ecryptfs`|`Efs`|
133133
|`ext2`|`S3fs`|
134134
|`ext3`|`Blobfuse`|
@@ -173,7 +173,7 @@ It's recommended to use Deployment Tool based deployment, as it simplifies the o
173173
- [Guidance for Defender for Endpoint on Linux Server with SAP](mde-linux-deployment-on-sap.md)
174174

175175
> [!IMPORTANT]
176-
> On Linux, Microsoft Defender for Endpoint creates an mdatp user with random UID and GID values. If you want to control these values, create an mdatp user before installation using the `/usr/sbin/nologin` shell option. Here's an example: `mdatp:x:UID:GID::/home/mdatp:/usr/sbin/nologin`.
176+
> On Linux, Microsoft Defender for Endpoint creates a mdatp user with random UID and GID values. If you want to control these values, create a mdatp user before installation using the `/usr/sbin/nologin` shell option. Here's an example: `mdatp:x:UID:GID::/home/mdatp:/usr/sbin/nologin`.
177177
178178
If you experience any installation issues, self-troubleshooting resources are available. See the links in the [Related content section](#related-content).
179179

0 commit comments

Comments
 (0)