When Real-Time Scan is enabled in SPLX, the operating system (OS) may hang when you access files in a shared folder through a mounted network drive (NFS).
The root cause of the hang issue is that when accessing files in a shared folder via NFS, there exists a deadlock loop between the Kernel Hooking Module (KHM) in kernel and these applications, including “khelper” and “request-key”, in the user space. This causes KHM to stop any following processes, which cannot be woken up. Additionally, the OS becomes unresponsive.
To break the deadlock, the affected applications have to be added to the exclusion list:
- Go to /opt/TrendMicro/SProtectLinux/tmsplx.xml.
- Add the following value to “RealtimeExcludeCommand” if they do not exist:
" khelper:request-key:keyctl:nfsidmap"
- Run the following command:
service splx restart
The issue should be resolved.