Re: [malware-list] [RFC 0/5] [TALPA] Intro to alinuxinterfaceforon access scanning

!MAILaRCHIVE_VOTE_RePLACE
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
To: Peter Dolding <oiaohm@...>
Cc: Arjan van de Ven <arjan@...>, <david@...>, <rmeijer@...>, Alan Cox <alan@...>, <capibara@...>, Eric Paris <eparis@...>, Rik van Riel <riel@...>, <davecb@...>, <linux-security-module@...>, Adrian Bunk <bunk@...>, Mihai Don??u <mdontu@...>, <linux-kernel@...>, <malware-list@...>, Pavel Machek <pavel@...>
Date: Saturday, August 16, 2008 - 5:39 am

On Sat, Aug 16, 2008 at 03:19:43PM +1000, Peter Dolding wrote:

Huh?  What are you talking about?  In Linux just about all of the
serious filesystems the only caching for file data happens in the page
cache layer.  So what you're saying doesn't make much sense, unless
you're talking about the user space samba daemon --- but even there,
Samba doesn't do any shortcut routing of data; as far as I know
everything goes from Samba, into the filesystem, before it gets served
out to other clients via Samba back out from the filesystem.  So
everything goes through the page cache.


No one else is taking about checking permissions; I thought this was
all about file *data* that we've been talking about.

If your argument means that we have to take every single
$Proprietary_OS's wacky permissions system, and push them into to core
Linux system so the AV system can evaluate it, I'm pretty sure
everyone is going to vomit all over such a proposal (and over you).

	    	     	       	    	   - Ted
--
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
Re: [malware-list] [RFC 0/5] [TALPA] Intro to alinuxinterfac..., David Collier-Brown, (Sun Aug 17, 5:17 pm)
Re: [malware-list] [RFC 0/5] [TALPA] Intro to alinuxinterfac..., Arjan van de Ven, (Sat Aug 16, 12:09 am)
Re: [malware-list] [RFC 0/5] [TALPA] Intro to alinuxinterfac..., Theodore Tso, (Sat Aug 16, 5:39 am)