since this update, where wsl is now installed directly from the app store, distro shortcuts that you can find in the start menu or opened through the windows terminal app will fail to work with the following error:
The specified service does not exist as an installed service.
Error code: Wsl/0x80070424
After several hours of my life spent on the problem it appears that Comodo auto-containment is silently triggered and contains the wsl executables when they are launched this way (just typing wsl in a command prompt will fail)
wsl.exe points to reparse points located in the user folder:
Comodo seems unable to deal properly with reparse points (which are using file system handlers) and follow the execution path and therefore contains the app (without any prompt nor any way to prevent it from being done).
All the wsl components appear to be trusted. I also tried to add the reparse points to the containment ignore rule list but you cannot select them, adding them manually by typing the path has no effect.
I disabled the antivirus of CIS and use windows defender instead, I only use CIS for HIPS, Firewall and up until my last pos, auto-containment which I had to disable so I could use WSL.
So to sum up: Auto-containment is normally enabled, CIS HIPS is set to Safe Mode, VirusScope is enabled and website filtering is disabled.
Thank you for providing the requested information.
We do not recommend customers to use two or more AV simultaneously as it causes compatible issue and more issues.
So, kindly disable the windows defender and use CIS AV & check the issue.
Kindly let us know your feedback.
Thank you for reporting.
Kindly unblock the blocked application.
Then create Ignore rule for the application/files which is getting auto contained.
Kindly let us know your feedback.
It worked! I did not even tried this after reenabling the antivirus as it wasn’t showing in this list nor gave any alert before, this time though it did not create any alert but it did appear in the blocked application list and I could unblock it.
Unblocking the element was enough but note that I still cannot create an ignore rule manually for reparse point: “wsl.exe - The file cannot be accessed by the system”
Previously, even adding the path manually failed to work with Windows defender enabled but now the ignore rule that I could create from the blocked application list is applied and wsl appears to work normally.