Fanotify is not enabled by this kernel

General system Kernel, boot, graphics & hardware
1

Hello everyone :slight_smile:

I am using EndeverOS with LTS kernel 6.6 and want to install Sophos Endpoint antivirus.

During the installation I get the error:
WARN: Fanotify is not enabled by this kernel so the AV plugin will not be able to scan files on access and, if necessary, block access to threats

Is there any way to enable this Fanotify?

Best regards

2

What file system type are you using? ext4?

https://www.kernel.org/doc/html/latest/admin-guide/filesystem-monitoring.html

FAN_FS_ERROR requires the fanotify group to be setup with the FAN_REPORT_FID flag.

As of this writing, the only file system that emits FAN_FS_ERROR notifications is Ext4.

“linux fanotify kernel module” typed into duckduckgo.com produces a lot of fanotify info.

Pudge

Edit:

in a terminal window, lsmod lists all the kernel modules installed in the active kernel.

lsmod | grep fanotify

doesn’t show fanotify as part of the kernel on EnOS

Compile your own kernel with fanotify, or find a Archlinux oriented kernel with fanotify compiled into said kernel.

EDIT #2:
I noticed you were using the LTS kernel. I rebooted into linux-6.6.59-1-lts and it also did not list fanotify as installed in the kernel.

3

Hello
I’ve done a little research on the internet but haven’t quite figured it out
I am currently using the BTRFS file system. If it only works with ext4, then the issue is probably over :frowning:

I don’t know how to compile my own kernel. I’m still too much of a beginner for that

Thanks for your answer

1 Like