Talpa Fails to build from source

Question

Hi, 
 I'm running Fedora 24 and using Sophos Linux Security Version 10.0.1 on it. I've at previous times ran Sophos on Linux and never had issues with using Talpa but now when I run 
 /opt/sophos-av/engine/talpa_select select 
 (On-access is currently working with Fanotify) 
 It fails and the log files last few lines ends with SelectException: exc-build-failed: 
 checking for linux/sched.h... yes checking for unused task flag... 0x1 checking for System.map... /boot/System.map-4.7.9-200.fc24.x86_64 checking for printk address... 0xffffffff811b44b0 checking for do_truncate address... 0xffffffff81244da0 checking for linux/fs.h... yes checking for do_truncate type... type 3 checking for linux/fs.h... yes checking for vfs_unlink type... with inode checking for linux/string.h... yes checking for strndup_user... present checking for tasklist_lock export... not available checking for tasklist_lock address... 0xffffffff81c05080 checking for appropriate build system... 2.6 build system detected checking for linux/dcache.h... yes checking for __d_path prototype... available checking for exported __d_path... undetectable checking for linux/dcache.h... yes checking for 2.6.38 style locking... post 2.6.38 style locking checking for __d_path address... 0xffffffff81262230 checking for __d_path type... struct path checking for vfsmount and br lock... vfsmount lock is mount_lock seqlock checking for __lookup_mnt_last address... 0xffffffff812695c0 checking for linux/mount.h... yes checking for vfsmount mnt_namespace element... assuming vfsmount has mnt_ns checking for syscallhook module execve support... available (0xffffffff8124f760) checking for nested mutexes... present checking for f_dentry in fs struct member... not detected checking for smbfs... not present checking for system call table hooking support... yes; shadow mapping checking for LSM support... disabled checking for exported hrtimers... missing checking for struct filename... present checking for asm-generic/fcntl.h... yes checking for correct getname... passed checking for securityfs support... present checking for binary sysctl support... disabled checking for legacy configuration support... included checking for IMA... present checking for ima_path_check... not present checking for putname... putname present but not exported checking for getname... getname present but not exported checking typedef ctl_table... not detected checking for X workaround... enabled configure: creating ./config.status config.status: creating makefile config.status: creating clients/Makefile config.status: creating tests/Makefile config.status: creating tests/modules/makefile config.status: creating tests/benchmark/Makefile config.status: creating config.h config.status: executing depfiles commands 
 Building... Traceback (most recent call last): File "talpa_select.py", line 1995, in _action File "talpa_select.py", line 660, in select File "talpa_select.py", line 1515, in select File "talpa_select.py", line 1599, in build File "talpa_select.py", line 1752, in __try_build SelectException: exc-build-failed

QC · Accepted Answer

Hello Danie de Jager , 
 I don't know the details of 10.0.1 - which Talpa version? Your log looks similar to the one in Failed to compile talpa binary pack for Ubuntu 16.04.1 LTS with kernel 4.7.2-040702-generic . 
 Christian

Danie de Jager · Answer

Hi, 
 Thanks for highlighting this. I am using 1.21.5 
 Configuring build of version 1.21.5... 
 and the Kernel: [4.7.9-200.fc24.x86_64] 
 I used Talpa on Fedora not too long ago but that might've been on Kernel 4.6. The Linux Agent I used with the version from SEC with the fast track release.