[Bug 2091359] Re: falcosecurity-scap-dkms FTBS in Noble with linux-6.11-hwe kernel

[Ubuntu Foundations Team Bug Bot]

The attachment "falcosecurity-scap-support-noble-6.11.debdiff" seems to
be a debdiff.  The ubuntu-sponsors team has been subscribed to the bug
report so that they can review and hopefully sponsor the debdiff.  If
the attachment isn't a patch, please remove the "patch" flag from the
attachment, remove the "patch" tag, and if you are member of the
~ubuntu-sponsors, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by
~brian-murray, for any issue please contact him.]

** Tags added: patch

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/2091359

Title:
  falcosecurity-scap-dkms FTBS in Noble with linux-6.11-hwe kernel

Status in falcosecurity-libs package in Ubuntu:
  In Progress
Status in falcosecurity-libs source package in Noble:
  In Progress

Bug description:
  [ Impact ]

  falcosecurity-scap-dkms does not compile from source in Noble with
  kernel 6.11:

  /var/lib/dkms/scap/0.15.1/build/main.c: In function ‘drop_nostate_event’:
  /var/lib/dkms/scap/0.15.1/build/main.c:1653:22: error: implicit declaration of function ‘fd_is_open’; did you mean ‘finish_open’? [-Werror=implicit-function-declaration]
   1653 |                     !fd_is_open(close_fd, fdt)
        |                      ^~~~~~~~~~
        |                      finish_open

  [ Test case ]

  Install the latest linux-6.11 kernel on Noble:

  $ sudo add-apt-repository ppa:canonical-kernel-team/ppa
  $ sudo apt update
  $ sudo apt install linux-image-6.11.0-12-generic \
                     linux-modules-6.11.0-12-generic \
                     linux-modules-extra-6.11.0-12-generic \
                     linux-headers-6.11.0-12-generic

  Install falcosecurity-scap-dkms:

  $ sudo apt install falcosecurity-scap-dkms

  Load the module:

  $ sudo modprobe scap

  [ Fix ]

  Patch the code to properly support the new linux 6.11 ABI.

  [ Regression potential ]

  A regression is unlikely due to the limited scope of the patch.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/falcosecurity-libs/+bug/2091359/+subscriptions