Ubuntu
linux-kvm package

Please enable CONFIG_FANOTIFY_ACCESS_PERMISSIONS

Bug #1915688 reported by Rene H. Larsen
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-kvm (Ubuntu)
New
Undecided
Unassigned

Bug Description

The CONFIG_FANOTIFY_ACCESS_PERMISSIONS option is required for certain security products, like Microsoft Defender for Endpoints, to operate correctly. As far as I can tell, it causes no overhead (when not actively using it), in terms of code size or startup time.

It is currently disabled in the Focal Fossa -kvm kernel:

$ grep CONFIG_FANOTIFY /boot/config-5.4.0-1032-kvm
CONFIG_FANOTIFY=y
# CONFIG_FANOTIFY_ACCESS_PERMISSIONS is not set

While it is enabled in the -generic kernel:

$ grep CONFIG_FANOTIFY /boot/config-5.4.0-65-generic
CONFIG_FANOTIFY=y
CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y

The same goes for Bionic Beaver.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.