Security for Virtualized Environments (SVE) is the first comprehensive security solution for virtualized datacenters. The solution protects virtualized Windows, Linux, and Solaris systems, both servers and desktops. While integrated with VMware vShield, the unique architecture of the solution allows it to be leveraged when using any system virtualization offering.
This article describes how to compile the DazukoFS module shipped with Silent Agent for an unsupported kernel version. DazukoFS enables Silent Agent to perform on-access scanning on Linux. For information on enabling on-access scanning and specifying the directories to be scanned, refer to the administrator documentation.
Starting with SVE 1.2.4, the Linux version of Silent Agent includes a beta on-access scanning module that works with specific Linux distributions and kernel versions.
| Linux Distribution | Kernel version |
|---|---|
| Ubuntu 10.04 | 2.6.32-44 |
| RHEL/CentOS 5.7, 5.6 | 2.6.18-308 |
| RHEL/CentOS 6.2, 6.1 | 2.6.32-279 |
On-access scanning requires the DazukoFS loadable kernel module. DazukoFS is a stackable file system that enables third-party applications to control file access on Linux systems.
The Silent Agent installation package includes and automatically installs DazukoFS. The DazukoFS package shipped with Silent Agent is compiled for the supported kernel versions. To use on-access scanning on supported Linux distributions with different kernel versions, you must compile the DazukoFS package for the corresponding kernel.
Important
Silent Agent is exclusively compatible with the DazukoFS version included in the installation package. If DazukoFS is already installed on the system, remove it prior to installing Silent Agent.
After installing Silent Agent, follow the steps below to compile DazukoFS for the system's kernel version and then load the module.