Security Whitelisting for Endpoint Backup on Linux

Configure your antivirus, endpoint security, or application protection software to allow the required CrashPlan Endpoint Backup components to operate.

This guidance applies to CrashPlan Agent version 4.0.0 and later.

Exclude CrashPlan folders

Add the following paths to your security software exclusions:

/opt/CrashPlan Backup For Endpoints/resources/bin
~/.config/CrashPlan Backup For Endpoints
/var/lib/CrashPlan Backup For Endpoints

Whitelist CrashPlan executables

Add the following executables as trusted applications:

  • CrashPlanBackupService

  • CrashPlanCLI

  • CrashPlan Backup For Endpoints

Exclude CrashPlan configuration files

Add the following configuration files to your security software exclusions:

  • config.yaml

  • WL.properties

Allow the CrashPlan daemon process

Ensure that the following daemon service is allowed to run:

/etc/systemd/system/CrashPlanBackupService.service

Verify the configuration

After configuring the required exclusions:

  1. Verify that the required CrashPlan paths are excluded.

  2. Verify that the CrashPlan executables are trusted.

  3. Verify that the configuration files are excluded from scanning.

  4. Verify that the CrashPlan systemd service is allowed to run.

  5. Start the CrashPlan service and confirm that the agent operates normally.