search

sophos / talpa

Talpa Kernel file access interception modules
GNU General Public License v2.0
17 stars 11 forks source link

Add support for CentOS 8.4 #21

Closed adiemu5 closed 3 years ago

adiemu5 commented 3 years ago

Two kernel changes backported into CentOS 8.4's 4.18.0-305 kernel series break talpa.

The first is the comment for PF_LESS_THROTTLE becoming multi-line, which the build process doesn't properly handle, resulting in PF_KTHREAD being undefined. This is fixed by piping the 'grep' results through 'sed' when building 'ffzb_local.c'.

The second is that MS_REMOUNT and MS_BIND were moved from uapi/linux/fs.h to uapi/linux/mount.h. Support for this was already in talpa, but conditioned only on the kernel version being >= 5.0. This is fixed by telling configure to check for it on Red Hat kernels >= the one from 8.4.

paperclip commented 3 years ago

Hi adiemu5,

Thank you for this PR.

We have fixed this in our tree in 672243b9af66067cf95cf3ba5291d1bab3783eae