This article describes the filesystems supported for on-access scanning on Linux platforms.
The following sections are covered:
Known to apply to the following Sophos product(s) and version(s)
Sophos Anti-Virus for Linux 9 and Sophos Anti-Virus for Linux 10
Good filesystems
The following filesystems are known to work with Sophos Anti-Virus for Linux:
| Filesystem Name | Talpa Support? | Fanotify Support? |
|---|---|---|
| btrfs | Yes | Yes |
| cifs | Yes | No |
| ecryptfs | Yes | Yes |
| ext2 | Yes | Yes |
| ext3 | Yes | Yes |
| ext4 | Yes | Yes |
| fuse | Yes | Yes |
| fuseblk | Yes | Yes |
| iso9660 | Yes | Yes |
| jfs | Yes | Yes |
| minix | Yes | Yes |
| msdos | Yes | Yes |
| ncpfs | Yes | Yes |
| nfs | Yes | Yes |
| nfs4 | Yes* | No |
| nssadmin | Yes | No |
| oes | Yes | No |
| overlayfs | Yes | Yes |
| overlay | Yes | Yes |
| ramfs | Yes | Yes |
| reiserfs | Yes | Yes |
| smbfs | Yes | Yes |
| tmpfs | Yes | Yes |
| udf | Yes | Yes |
| vfat | Yes | Yes |
| xfs | Yes | Yes |
| zfs | Yes | No |
*Note: Talpa does not support locally mounted (non-network) nfs4 filesystems.
Unsupported filesystems
The following filesystems are unsupported. The majority of these are pseudo-filesystems that do not contain regular files and cannot be scanned.
| Filesystem Name | Talpa Support? | Fanotify Support? | Notes |
|---|---|---|---|
| aufs | No | No | Pseudo-filesystem |
| autofs | No | No | Pseudo-filesystem |
| binfmt_misc | No | No | Pseudo-filesystem |
| bpf | No | No | Pseudo-filesystem |
| cgroup | No | No | Pseudo-filesystem |
| configfs | No | No | Pseudo-filesystem |
| debugfs | No | No | Pseudo-filesystem |
| devfs | No | No | Pseudo-filesystem |
| devpts | No | No | Pseudo-filesystem |
| devtmpfs | No | No | Pseudo-filesystem |
| fuse.gvfs-fuse-daemon |
No | No | See KBA 118982 |
| fusectl | No | No | Pseudo-filesystem |
| inotifyfs | No | No | Pseudo-filesystem |
| mqueue | No | No | Pseudo-filesystem |
| nfsd | No | No | Pseudo-filesystem |
| nsspool | No | No | Pseudo-filesystem |
| proc | No | No | Pseudo-filesystem |
| romfs | No | No | Pseudo-filesystem |
| rootfs | No | No | Pseudo-filesystem |
| rpc_pipefs | No | No | Pseudo-filesystem |
| securityfs | No | No | Pseudo-filesystem |
| selinuxfs | No | No | Pseudo-filesystem |
| squashfs | No | No | |
| subfs | No | No | Pseudo-filesystem |
| sysfs | No | No | Pseudo-filesystem |
| usbdevfs | No | No | Pseudo-filesystem |
| usbfs | No | No | Pseudo-filesystem |
Other filesystems
Behavior with other filesystems will depend on the on-access interception method:
- Talpa will attempt to intercept operations on any other filesystem. Talpa is the default method.
- Fanotify will only scan files on the list of good filesystems.
If you’ve spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article.
This is invaluable for us to ensure that we continually strive to give our customers the best information possible.