Re: TALPA - a threat model? well sorta.

!MAILaRCHIVE_VOTE_RePLACE
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
To: Helge Hafting <helge.hafting@...>
Cc: <alan@...>, <andi@...>, Arjan van de Ven <arjan@...>, Eric Paris <eparis@...>, <greg@...>, <hch@...>, <linux-kernel@...>, <linux-kernel-owner@...>, <malware-list@...>, <peterz@...>, <riel@...>, <tytso@...>, <viro@...>
Date: Friday, August 15, 2008 - 6:44 am

Helge Hafting wrote on 15/08/2008 11:07:48:


It can never be free - what ever you do it has to happen some time and 
that can and will clash with something else. So your reason why it is 
wrong is a bit to simplistic.


The first thing you have to make clear is whether in your vision inode 
clean-dirty-unknown status is persistent or not? But in any case I think 
you are making a problem where there isn't one, think about it a bit.

But the idea about the ability to make a clean copy is interesting. So we 
would need a copy done without userspace intervention and preserving the 
inode cache status alongside it. Maybe splice or tee could easily do it? 
Although I am not sure how often copying would happen and whether this 
would be such a gain.

--
Tvrtko A. Ursulin
Senior Software Engineer, Sophos

"Views and opinions expressed in this email are strictly those of the 
author.
 The contents has not been reviewed or approved by Sophos."
 

Sophos Plc, The Pentagon, Abingdon Science Park, Abingdon,
OX14 3YP, United Kingdom.

Company Reg No 2096520. VAT Reg No GB 348 3873 20.

--
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
TALPA - a threat model? well sorta., Eric Paris, (Wed Aug 13, 12:36 pm)
Re: TALPA - a threat model? well sorta., 7v5w7go9ub0o, (Wed Aug 13, 8:14 pm)
Re: TALPA - a threat model? well sorta., 7v5w7go9ub0o, (Wed Aug 13, 10:25 pm)
Re: TALPA - a threat model? well sorta., Andi Kleen, (Wed Aug 13, 2:17 pm)
Re: TALPA - a threat model? well sorta., Mihai , (Wed Aug 13, 8:18 pm)
RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Thu Aug 14, 7:58 am)
Re: TALPA - a threat model? well sorta., Eric Paris, (Wed Aug 13, 2:40 pm)
Re: TALPA - a threat model? well sorta., H. Peter Anvin, (Wed Aug 13, 2:21 pm)
Re: TALPA - a threat model? well sorta., Arjan van de Ven, (Wed Aug 13, 2:24 pm)
Re: TALPA - a threat model? well sorta., Arjan van de Ven, (Wed Aug 13, 1:39 pm)
Re: TALPA - a threat model? well sorta., Pavel Machek, (Fri Aug 15, 12:06 pm)
Re: TALPA - a threat model? well sorta., Pavel Machek, (Mon Aug 18, 9:30 am)
Re: TALPA - a threat model? well sorta., Eric Paris, (Wed Aug 13, 2:57 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Arjan van de Ven, (Thu Aug 14, 9:46 am)
Re: TALPA - a threat model? well sorta., Arjan van de Ven, (Wed Aug 13, 5:39 pm)
Re: TALPA - a threat model? well sorta., Eric Paris, (Thu Aug 14, 10:12 am)
Re: TALPA - a threat model? well sorta., Helge Hafting, (Fri Aug 15, 6:07 am)
Re: TALPA - a threat model? well sorta., , (Fri Aug 15, 6:44 am)
Re: TALPA - a threat model? well sorta., Peter Zijlstra, (Fri Aug 15, 6:37 am)
RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Fri Aug 15, 9:10 am)
Re: [malware-list] TALPA - a threat model? well sorta., Helge Hafting, (Mon Aug 18, 6:02 am)
RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Fri Aug 15, 12:30 pm)
RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Fri Aug 15, 1:40 pm)
RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Fri Aug 15, 2:17 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Fri Aug 15, 4:17 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Fri Aug 15, 1:04 pm)
RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Fri Aug 15, 2:09 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Helge Hafting, (Mon Aug 18, 6:09 am)
Re: [malware-list] TALPA - a threat model? well sorta., Peter Zijlstra, (Mon Aug 18, 6:14 am)
Re: TALPA - a threat model? well sorta., Arjan van de Ven, (Thu Aug 14, 11:57 am)
Re: TALPA - a threat model? well sorta., Theodore Tso, (Wed Aug 13, 2:15 pm)
Re: TALPA - a threat model? well sorta., Eric Paris, (Wed Aug 13, 3:02 pm)
Re: TALPA - a threat model? well sorta., Theodore Tso, (Wed Aug 13, 3:29 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Thu Aug 14, 9:24 am)
Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Thu Aug 14, 11:50 am)
Re: [malware-list] TALPA - a threat model? well sorta., Pavel Machek, (Fri Aug 15, 10:37 am)
Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Thu Aug 14, 3:17 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Christoph Hellwig, (Thu Aug 14, 3:34 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Thu Aug 14, 3:41 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Thu Aug 14, 10:04 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Arjan van de Ven, (Thu Aug 14, 11:41 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Johannes Weiner, (Fri Aug 15, 1:12 am)
Re: [malware-list] TALPA - a threat model? well sorta., Christoph Hellwig, (Thu Aug 14, 4:20 pm)
Re: [malware-list] TALPA - a threat model? well sorta., J. Bruce Fields, (Thu Aug 14, 5:21 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Thu Aug 14, 7:34 pm)
Re: [malware-list] TALPA - a threat model? well sorta., J. Bruce Fields, (Tue Aug 19, 5:43 pm)
RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Thu Aug 14, 8:03 am)
Re: [malware-list] TALPA - a threat model? well sorta., Pavel Machek, (Fri Aug 15, 10:31 am)
RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Wed Aug 13, 5:15 pm)
Re: TALPA - a threat model? well sorta., Arjan van de Ven, (Wed Aug 13, 2:21 pm)
Re: TALPA - a threat model? well sorta., Greg KH, (Wed Aug 13, 12:57 pm)
Re: TALPA - a threat model? well sorta., Alan Cox, (Wed Aug 13, 12:24 pm)
Re: TALPA - a threat model? well sorta., Arnd Bergmann, (Thu Aug 14, 9:00 am)
Re: TALPA - a threat model? well sorta., Christoph Hellwig, (Wed Aug 13, 1:07 pm)
Re: TALPA - a threat model? well sorta., Eric Paris, (Wed Aug 13, 12:47 pm)
Re: TALPA - a threat model? well sorta., Alan Cox, (Wed Aug 13, 12:37 pm)
Re: TALPA - a threat model? well sorta., Eric Paris, (Wed Aug 13, 1:00 pm)
Re: TALPA - a threat model? well sorta., Alan Cox, (Wed Aug 13, 3:59 pm)
RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Wed Aug 13, 5:24 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Rik van Riel, (Wed Aug 13, 5:35 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Arjan van de Ven, (Fri Aug 15, 6:05 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Rik van Riel, (Mon Aug 18, 12:43 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Arjan van de Ven, (Sun Aug 17, 7:26 pm)
Re: [malware-list] TALPA - a threat model? well sorta., David Collier-Brown, (Sun Aug 17, 5:11 pm)
Re: [malware-list] TALPA - a threat model? well sorta., Eric Paris, (Thu Aug 14, 11:25 pm)