After installing Sophos Anti-Virus for Linux 9.6.1 messages similar to the following are shown in the syslog:
kernel: talpa-vetting: [intercepted 28220-28222-28222] failed to openDentry -13 - trying open of /var/log/mcelog
kernel: talpa-vetting: [intercepted 28220-28222-28222] Open failed (-13), will have no stream
First seen in
Sophos Anti-Virus for Linux 9.6.1
These messages were due to some debug messages being inadvertently flagged as errors in the 9.6.1 release.
What To Do
These messages can be safely ignored in version 9.6.1, the listed files are still being scanned.
We aim to resolve this in a subsequent version of talpa which will prevent these messages from being incorrectly logged. However it should be noted that the message "Open failed (-13), will have no stream" can still be legitimately seen if using a version other than 9.6.1.