Linux Endpoint Detection and Response (EDR) supports an automatic schedule for upgrading plugins. This allows plugins to be maintained at the latest release without the hassle of manual plugin management. Automatic Upgrades can also be disabled.

Supported Versions

Automatic Plugin Upgrades will be enabled by default for new clients after February 2021 or sensor version 1.2.0+. This ensures our latest capabilities are delivered to customers quickly.

Opting Out

Existing customers will receive a communication with opt-out instructions, prior to Automatic Upgrades being enabled. If you wish to opt-out of this feature please contact us via your Slack channel (if provisioned) or submit a request to support@redcanary.com.

Enabling Sensor Auto-Upgrade

The auto-upgrading sensor package is named cwp. To install it, first uninstall the existing package (previous packages are named canary-forwarder or canary_forwarder) then install the auto-upgrading package.

Note: These steps are relevant if there is an existing deployment of the sensor as either canary-forwarder or canary_forwarder. New deployments using the cwp package do not have additional steps.

Steps

Debian

```
sudo apt remove canary-forwarder
```
```
sudo apt autoremove
```
```
sudo apt-get update
```
```
sudo apt-get install cwp
```

RHEL/Centos 6, 7, 8

```
sudo yum remove -y canary_forwarder
```
```
sudo yum install -y cwp
```

Plugins: Automatic Upgrades