How to compile the DazukoFS module for an unsupported kernel version



Security for Virtualized Environments (SVE) is the first comprehensive security solution for virtualized datacenters. The solution protects virtualized Windows, Linux, and Solaris systems, both servers and desktops. While integrated with VMware vShield, the unique architecture of the solution allows it to be leveraged when using any system virtualization offering.

This article describes how to compile the DazukoFS module shipped with Bitdefender Tools for an unsupported kernel version. DazukoFS enables Bitdefender Tools to perform on-access scanning on Linux. For information on enabling on-access scanning and specifying the directories to be scanned, refer to Administrator's Guide.

Introduction

The Linux version of Bitdefender Tools includes an on-access scanning module that, for specific Linux distributions and kernel versions, requires the DazukoFS loadable kernel module. DazukoFS is a stackable file system that enables third-party applications to control file access on Linux systems.

The Bitdefender Tools installation package includes and automatically installs DazukoFS. The DazukoFS package shipped with Bitdefender Tools is compiled for the kernel versions listed in the table below. To use on-access scanning on supported Linux distributions with lower kernel versions, you must compile the DazukoFS package for the corresponding kernel.

Linux Distribution Kernel version
Debian 5.0, 6.0 2.6.18 - 2.6.37
Ubuntu 10.04 LTS
CentOS 6.x
Red Hat Enterprise Linux 6.x

DazukoFS limitations

For DazukoFS and on-access scanning module to work together, a series of conditions must be met. Please check if any of the statements below apply to your Linux system and follow the guidelines to avoid issues.

  • DazukoFS supports kernels up to version 2.6.37.
  • The SELinux policy must be either disabled or set to permissive. To check and adjust the SELinux policy setting, edit the /etc/selinux/config file.
  • Bitdefender Tools is exclusively compatible with the DazukoFS version included in the installation package. If DazukoFS is already installed on the system, remove it prior to installing Bitdefender Tools.
  • If the DazukoFS package shipped with Bitdefender Tools is not compatible with the system's kernel version, the module will fail to load. In such case, you can either update the kernel to the supported version or recompile the DazukoFS module for your kernel version. You can find the DazukoFS package in the Bitdefender Tools installation directory:
    /opt/BitDefender/share/modules/dazukofs/dazukofs-modules.tar.gz
  • When sharing files using dedicated servers such as NFS, UNFSv3 or Samba, you have to start the services in the following order:
    1. Enable on-access scanning from Control Center. For more information, refer to On-Access policy settings.
    2. Start the network sharing service.
      For NFS:
      # service nfs start
      For UNFSv3:
      # service unfs3 start
      For Samba:
      # service smbd start

      Important: For the NFS service, DazukoFS is compatible only with NFS User Server.

Compiling and loading DazukoFS for other kernel versions

After installing Bitdefender Tools, follow the steps below to compile DazukoFS for the system's kernel version and then load the module.

  1. Download the proper kernel headers.
    • On Ubuntu systems, run this command:
      # sudo apt-get install linux-headers-`uname -r`
    • On RHEL/CentOS systems, run this command:
      # sudo yum install kernel-devel kernel-headers
  2. On Ubuntu systems, you need build-essential:
    # sudo apt-get install build-essential
  3. Copy and extract the DazukoFS source code in a preferred directory:
    # mkdir temp
    # cd temp
    # cp /opt/BitDefender/share/src/dazukofs-source.tar.gz
    # tar -xzvf dazukofs-source.tar.gz
    # cd dazukofs-3.1.4
  4. Compile the module:
    # make
  5. Install and load the module:
    # make dazukofs_install




Applies to: GravityZone Security for Virtualized Environment, , Security for Virtualized Environments by Bitdefender

Operating Systems: Debian/Ubuntu, Red Hat