Install/build for Talpa fails on RHEL 7.5

Basic server information:

This is a RHEL 7.5 server

# gcc --version
gcc (GCC) 4.8.5 20150623 (Red Hat 4.8.5-28)
Copyright (C) 2015 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

# uname -r
3.10.0-862.3.2.el7.x86_64

There are no custom builds, all standard software on this host. GCC and the kernel-devel packages were installed directly from the RHEL repo. The initial install failed to install the Talpa stuff, so I tried to manually build it with the 'talpa_select select' command. This is what I am seeing in the logs, and I am at a loss:

 

[Talpa-select]
Copyright 1989-2018 Sophos Limited. All rights reserved.
2018-06-13 13:22:39 EDT /opt/sophos-av/engine/_/talpa_select select
Linux distribution: [redhat]
Product: [Red Hat Enterprise Linux Server release 7.5 (Maipo)]
Kernel: [3.10.0-862.3.2.el7.x86_64]
Multiprocessor support enabled.
Searching for source pack...
Searching for suitable binary pack...
No suitable binary pack available.
Preparing for build...
Extracting sources...
Configuring build of version 1.23.6...
configuring checking for a BSD-compatible install... /bin/install -c
checking whether build environment is sane... yes
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking how to create a ustar tar archive... gnutar
checking whether to enable maintainer-specific portions of Makefiles... no
checking for gcc... gcc
checking for C compiler default output file name... a.out
checking whether the C compiler works... yes
checking whether we are cross compiling... no
checking for suffix of executables...
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ANSI C... none needed
checking for style of include used by make... GNU
checking dependency style of gcc... none
checking whether gcc and cc understand -c and -o together... yes
checking for ld... ld
checking for egrep... grep -E
checking whether ln -s works... yes
checking for cat... /bin/cat
checking for cut... /bin/cut
checking for sed... /bin/sed
checking for uname... /bin/uname
checking for rm... /bin/rm
checking for xargs... /bin/xargs
checking for Talpa version... 1.23.6
checking for operating system... Linux
checking for kernel headers layout... /lib/modules/3.10.0-862.3.2.el7.x86_64/build/include:/lib/modules/3.10.0-862.3.2.el7.x86_64/build/arch/x86/include:/lib/modules/3.10.0-862.3.2.el7.x86_64/build/arch/x86/incl
ude/generated:/lib/modules/3.10.0-862.3.2.el7.x86_64/source/include:/lib/modules/3.10.0-862.3.2.el7.x86_64/source/arch/x86/include:/lib/modules/3.10.0-862.3.2.el7.x86_64/build/include/generated/uapi:/lib/modules
/3.10.0-862.3.2.el7.x86_64/build/include/uapi:/lib/modules/3.10.0-862.3.2.el7.x86_64/source/include/uapi
checking for linux/version.h... yes
checking for linux/magic.h... yes - /lib/modules/3.10.0-862.3.2.el7.x86_64/build/include/uapi
checking for uapi/linux/magic.h... yes - /lib/modules/3.10.0-862.3.2.el7.x86_64/build/include
checking for linux/uidgid.h... for uidgid strict type checking header
checking for linux/compiler.h... yes - /lib/modules/3.10.0-862.3.2.el7.x86_64/build/include
checking for uapi/asm/unistd.h... yes - /lib/modules/3.10.0-862.3.2.el7.x86_64/build/arch/x86/include
checking for asm/unistd_64_x32.h... yes - /lib/modules/3.10.0-862.3.2.el7.x86_64/build/arch/x86/include/generated
checking for kernel configuration... done
checking for compilation environment... ok
checking for kernel architecture... x86_64
checking for kernel version code... 199168
checking for kernel version string... 3.10.0-862.3.2.el7.x86_64
checking for RHEL release code... 1797
checking for linux/sched.h... yes
checking for unused task flag... 0x1
checking for System.map... /boot/System.map-3.10.0-862.3.2.el7.x86_64
checking for printk address... 0xffffffff81708bc7
checking for do_truncate address... 0xffffffff81218c90
checking for linux/fs.h... yes
checking for do_truncate type... type 3
checking for linux/fs.h... yes
checking for vfs_unlink type... with inode
checking for linux/string.h... yes
checking for strndup_user... present
checking for tasklist_lock export... not available
checking for tasklist_lock address... 0xffffffff81c07080
checking for linux/uaccess.h... yes
checking for probe_kernel_read... present
checking for appropriate build system... 2.6 build system detected
checking for linux/dcache.h... yes
checking for __d_path prototype... available
checking for exported __d_path... undetectable
checking for linux/dcache.h... yes
checking for 2.6.38 style locking... post 2.6.38 style locking
checking for __d_path address... 0xffffffff812363b0
checking for __d_path type... struct path
checking for vfsmount and br lock... vfsmount lock is mount_lock seqlock
checking for __lookup_mnt address... 0xffffffff8123deb0
checking for linux/fs_struct.h... yes
checking for get_fs_root_and_pwd function... system does not have get_fs_root_and_pwd
checking for linux/mount.h... yes
checking for vfsmount mnt_namespace element... assuming vfsmount has mnt_ns
checking for syscallhook module execve support... available (0xffffffff81223c50)
checking for nested mutexes... present
checking for f_dentry in fs struct member... detected
checking for backported mount rcu... detected
checking for smbfs... not present
checking for system call table hooking support... yes; shadow mapping
checking for LSM support... disabled
checking for exported hrtimers... missing
checking for struct filename... present
checking for asm-generic/fcntl.h... yes
checking for correct getname... passed
checking for securityfs support... present
checking for binary sysctl support... disabled
checking for legacy configuration support... included
checking for IMA... present
checking for ima_path_check... not present
checking for putname... putname present but not exported
checking for getname... getname present but not exported
checking typedef ctl_table... detected
checking for X workaround... enabled
configure: creating ./config.status
config.status: creating makefile
config.status: creating clients/Makefile
config.status: creating tests/Makefile
config.status: creating tests/modules/makefile
config.status: creating tests/benchmark/Makefile
config.status: creating config.h
config.status: executing depfiles commands

Building...
Traceback (most recent call last):
  File "talpa_select.py", line 2216, in _action
  File "talpa_select.py", line 845, in select
  File "talpa_select.py", line 1736, in select
  File "talpa_select.py", line 1820, in build
  File "talpa_select.py", line 1973, in __try_build
SelectException: exc-build-failed

  • Hello ,

    wonder why it says it has no suitable binary pack, thought there's a binpack for this kernel version.
    Can't say what talpa_select does at this point or how to determine why it fails - I think could.

    Christian

  • In reply to QC:

    Talpa 1.23.6 doesn't support RHEL 7.5, since Redhat changed the kernel in a way it doesn't support.

     

    If you configure updating, Talpa will be upgraded to 1.23.8 which does support RHEL 7.5 (hence why the online list of TBPs includes that kernel).

     

    In general you need to have updating working to get recent kernel support, sometimes including using git to get even more up to date Talpa source, although that isn't required in this case.

  • In reply to DouglasLeeder:

    Thank you for the insight. I looked at the supported OS list, and figured RHEL 7 was RHEL 7. I didn't realize that a change in minor version would have affected usability due to kernel changes. This came from my organization, and not directly from Sophos/McAfee, so it may be a version or two behind.