> Source: [sk165559](https://support.checkpoint.com/results/sk/sk165559)

# sk165559 - Policy installation failure after MDS upgrade or backup restore

| Property | Value |
|----------|-------|
| Solution ID | sk165559 |
| Date Created | 2020-03-03 |
| Last Modified | 2020-07-05 |
| Technical Level | Advanced |
| Products | Multi-Domain Security Management Server |
| Versions | R82.10, R81.20, R82 |
| OS | Gaia |

## Symptoms

- * Policy installation fails after MDS upgrade or MDS backup restore with error in `/opt/CPmds-R80.30/customers/***/CPsuite-R80.30/fw1/bin/fw_loader': double free or corruption`  

* An fw_loader usermode core file is generated each time the policy installation failed "`/var/log/dump/usermode/fw_loader_`."  

* Fw_loader debug shows the following error:  
  `registry_root_flush: Error opening tmp registry file [/opt/CPmds-R80.30/customers/Domain-name/CPshrd-R80.30/registry/HKLM_registry.data.tmp] for writing: Permission denied`

## Cause

During mds_backup we lock the registry files of MDS and Domains/CMAs with the below lines and at the end we release the lock with -i flag:  

*$CHATTR +i -R $MDS_CPDIR/registry/*   
*$CHATTR +i R $MDSDIR/customers/\*/CPshrd$VERSION_STRING/registry/*   

If the script fails (due to lack of disk space for example), the locks aren't released which resulted with critical issues such as policy installation failure while trying to access the registry.

<br />

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content