When installing Endpoint Protection (SEP) on Oracle 7.6, the Auto-Protect (AP) installation fails.  The AP build completes, but inserting the AP module fails with an access denied error.  If SELinux is disabled during the install or when running the build.sh script, the system will hang.  This only happens when using the 4.14 UEK kernel. Red-Hat kernels do not exhibit this error.  

Tue Apr 16 20:55:04 CAT 2019: Build succeeded
Stopping smcd (via systemctl): [ OK ]
Stopping rtvscand (via systemctl): [ OK ]
Stopping symcfgd (via systemctl): [ OK ]
insmod: ERROR: could not insert module /opt/Symantec/autoprotect/.symevrm-custom-4.14.35-1844.4.5.el7uek-x86_64.ko: Permission denied
.symevrm: unable to load kernel support module (UNSUPPORTED-OS-or-UNK-UNK-4.14.35-1844.4.5.el7uek-x86_64)
Restarting autoprotect (via systemctl): Job for autoprotect.service failed because the control process exited with error code. See "systemctl status autoprotect.service" and "journalctl -xe" for details.
[FAILED]
kernel drivers are not loaded.

If SELinux is configured to enforce, Auto-Protect will fail to load. 

SELinux must be disabled or modified to allow Auto-Protect to load.  See the following document:

Auto-Protect kernel modules fail to load with SELinux set to enforcing.

The hang observed once SELinux has been disabled is fixed in Symantec Endpoint Protection 14.2 RU2 MP1. For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec software here.