Cc: Adrian Bunk <bunk@...>, <davecb@...>, Greg KH <greg@...>, Press, Jonathan <Jonathan.Press@...>, <linux-kernel@...>, <linux-security-module@...>, <malware-list@...>, Mihai Don??u <mdontu@...>, Pavel Machek <pavel@...>
the biggest objection is the lack of security model description.
STILL nobody has answered Ted's questions.
And still the AV side of the argument keeps making circular arguments.
I'm not saying the kernel shouldn't be involved at all.
I can totally see a solution where we have a
sys_virus_scan(int fd)
that glibc calls at appropriate places (say every read() and mmap())
and that on the kernel side uses a cache to store which virus signature
version it was last scanned with, and if not new enough.. punts to some
userspace scanner for vetting.
but first someone needs to answer Ted's very basic questions or the
TALPA side really does look like a donkey in this argument.
--
If you want to reach me at my work email, use arjan@linux.intel.com
For development, discussion and tips for power savings,
visit http://www.lesswatts.org
--
