> Source: [sk184027](https://support.checkpoint.com/results/sk/sk184027)

# sk184027 - Harmony Endpoint Installation Fails on Red Hat Enterprise Linux 9.6 Due to noexec Mount Option on /var

| Property | Value |
|----------|-------|
| Solution ID | sk184027 |
| Date Created | 2025-09-22 |
| Last Modified | 2025-09-25 |
| Technical Level | Advanced |
| Products | Endpoint Security |
| Versions | E88.X |
| OS | Linux |

## Symptoms

- * Harmony Endpoint installation fails on Red Hat Enterprise Linux (RHEL) 9.6 servers.  
  Installer output shows this error:   
  `ERROR: main: Sandbox: Unable to run command [cpla check-audit-compat]: exec: "cpla": executable file not found in $PATH`.
* This error message appears during installation: `Failed to disable unit: sbalinux-product-update.timer does not exist. After failure, the product self-uninstalls and removes all installation traces (no cpla binary remains).`
* The issue persists after upgrading to the latest supported Harmony Endpoint version (1.24.2). Installation succeeds on servers running RHEL 9.5 but fails on those upgraded to RHEL 9.6.   
  Attempts to run the installer in debug mode and with modified scripts do not resolve the issue until mount options are changed. The system does not show any specific error codes and shows error messages as shown above.
* The `/var` partition is mounted with the **noexec** flag, which prevents execution of files in `/var`.

## Cause

The `/var` partition on affected Red Hat Enterprise Linux 9.6 servers is mounted with the **noexec** option. This mount option prevents execution of binaries from the `/var` directory.   

The Harmony Endpoint installer and its components, such as the `cpla` binary, require executable permissions in `/var` to complete the installation. As a result, the installer cannot execute required files, leading to installation failure and automatic uninstallation.   

This configuration is not present on working servers (RHEL 9.5), which explains why the issue only appears after the operating system upgrade and/or mount option change.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content