Sophos

Online support

Product maintenance

Contact support

Support services

Sophos Anti-Virus for Linux: Using a custom built or unsupported kernel

The on-access scanning component of Sophos Anti-Virus for Linux requires several kernel modules to be installed and loaded.

Sophos provides precompiled binary packs for 'supported' kernel versions. However, if either of the following apply:

the Sophos Anti-Virus for Linux installer will need to compile custom binary packs to match your running kernel.

Note: Sophos Anti-Virus for Linux currently supports a limited number of 64-bit operating systems (e.g. SUSE Linux Enterprise Server 9). These are listed in the knowledgebase article Sophos Anti-Virus for Linux, version 6.0: system requirements.

What to do

1. Technical requirements

Before you run the installer, to enable it to compile custom kernel modules, you must have the following installed:

Some distributions (such as Debian) provide a kernel headers package. These distributions also provide all the required kernel sources to compile.

2. Running the installer

Once the above components are installed, you can run the Sophos Anti-Virus for Linux installer as usual, and custom kernel modules will be built.

3. Using a non-default GCC version

If a non-default GCC version was used for kernel compilation, you must use the same version when compiling Talpa.

The recommended way of doing this is to create a file named build.options in <installation directory>/talpa/override/. This file should contain a single line listing options which are directly passed to Talpa's configure script. In this particular case, something like 'CC=gcc-kernel' should be added, where 'gcc-kernel' is a GCC binary used for kernel compilation.

4. Troubleshooting

If the installer cannot compile the kernel modules, a log file is created at

/opt/sophos-av/log/talpaselect.log

which details the problem.

If this occurs, please forward the log file to Sophos technical support, along with the following information:

If you need more information or guidance, then please contact technical support.