Re: [malware-list] TALPA - a threat model? well sorta.

view
thread

!MAILaRCHIVE_VOTE_RePLACE

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

To: Peter Zijlstra <peterz@...>

Cc: <alan@...>, <andi@...>, Arjan van de Ven <arjan@...>, <douglas.leeder@...>, <hch@...>, Helge Hafting <helge.hafting@...>, <linux-kernel@...>, <malware-list@...>, <malware-list-bounces@...>, <viro@...>

Subject: Re: [malware-list] TALPA - a threat model? well sorta.

Date: Monday, August 18, 2008 - 6:24 am

Peter Zijlstra wrote on 18/08/2008 11:14:00:

quoted text> On Mon, 2008-08-18 at 12:09 +0200, Helge Hafting wrote:
> > 
> > Scanning on open should be a last resort. Scan in advance when you 
can.
quoted text> > Of course, removable media cannot be scanned until it is inserted and 
> > mounted,
> > that is obvious. The scanning can start as soon as the filesystem is 
> > mounted though,
> > there is no reason to wait until users try to access something.
> > 
> > A CD inserted into a CD-server may not necessarily be needed 
immediately, so
quoted text> > scanning in advance will help here too. The user inserting a CD in a 
home
quoted text> > computer may start to use stuff right away, or perhaps he spends
> > some time reading the docs before a complicated install. Sill room for 
some
quoted text> > scanning in advance, which also may end up with the nice effect of 
> > caching the CD.
> 
> Hmm, then there is the issue that an active scanner will avoid me from
> removing the media again. Most annoysome when the machine won't promptly
> give back the disk.
> 
> Imagine me browsing through a stack of unmarked dvd-rw media trying to
> find the one with the right file on it, but having to wait every time
> for the whole media to get scanned..
> 
> Not a nice picture.

I agree. And not only that but also the fact that most of the time I would 
not want mount to trigger a background scan of everything because not all 
might be accessed later. Therefore it would be just wasting resources and 
ruining user experience. This argument is flawed in a way that is 
unsolvable in the same way normal preload to page cache is unsolvable 
because it is impossible to predict the usage pattern.

--
Tvrtko A. Ursulin
Senior Software Engineer, Sophos

"Views and opinions expressed in this email are strictly those of the 
author.
 The contents has not been reviewed or approved by Sophos."
 

Sophos Plc, The Pentagon, Abingdon Science Park, Abingdon,
OX14 3YP, United Kingdom.

Company Reg No 2096520. VAT Reg No GB 348 3873 20.

--
unsubscribe noticeTo unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:

TALPA - a threat model? well sorta., Eric Paris, (Wed Aug 13, 12:36 pm)

Re: TALPA - a threat model? well sorta., 7v5w7go9ub0o, (Wed Aug 13, 8:14 pm)

Re: TALPA - a threat model? well sorta., 7v5w7go9ub0o, (Wed Aug 13, 10:25 pm)

Re: TALPA - a threat model? well sorta., Andi Kleen, (Wed Aug 13, 2:17 pm)

Re: TALPA - a threat model? well sorta., Mihai , (Wed Aug 13, 8:18 pm)

RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Thu Aug 14, 7:58 am)

Re: [malware-list] TALPA - a threat model? well sorta., Mihai , (Thu Aug 14, 8:34 am)

Re: TALPA - a threat model? well sorta., Eric Paris, (Wed Aug 13, 2:40 pm)

Re: TALPA - a threat model? well sorta., H. Peter Anvin, (Wed Aug 13, 2:21 pm)

Re: TALPA - a threat model? well sorta., Arjan van de Ven, (Wed Aug 13, 2:24 pm)

Re: TALPA - a threat model? well sorta., Arjan van de Ven, (Wed Aug 13, 1:39 pm)

Re: TALPA - a threat model? well sorta., Pavel Machek, (Fri Aug 15, 12:06 pm)

Re: TALPA - a threat model? well sorta., , (Mon Aug 18, 8:21 am)

Re: TALPA - a threat model? well sorta., Pavel Machek, (Mon Aug 18, 9:30 am)

Re: TALPA - a threat model? well sorta., , (Mon Aug 18, 8:03 pm)

Re: TALPA - a threat model? well sorta., , (Thu Aug 14, 9:31 pm)

Re: TALPA - a threat model? well sorta., Eric Paris, (Wed Aug 13, 2:57 pm)

Re: [malware-list] TALPA - a threat model? well sorta., , (Thu Aug 14, 5:46 am)

Re: [malware-list] TALPA - a threat model? well sorta., , (Thu Aug 14, 9:37 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Arjan van de Ven, (Thu Aug 14, 9:46 am)

Re: TALPA - a threat model? well sorta., Arjan van de Ven, (Wed Aug 13, 5:39 pm)

Re: TALPA - a threat model? well sorta., Eric Paris, (Thu Aug 14, 10:12 am)

Re: TALPA - a threat model? well sorta., Helge Hafting, (Fri Aug 15, 6:07 am)

Re: TALPA - a threat model? well sorta., , (Fri Aug 15, 6:44 am)

Re: TALPA - a threat model? well sorta., Peter Zijlstra, (Fri Aug 15, 6:37 am)

RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Fri Aug 15, 9:10 am)

Re: [malware-list] TALPA - a threat model? well sorta., Helge Hafting, (Mon Aug 18, 6:02 am)

RE: [malware-list] TALPA - a threat model? well sorta., , (Fri Aug 15, 12:25 pm)

RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Fri Aug 15, 12:30 pm)

RE: [malware-list] TALPA - a threat model? well sorta., , (Fri Aug 15, 1:33 pm)

RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Fri Aug 15, 1:40 pm)

RE: [malware-list] TALPA - a threat model? well sorta., , (Fri Aug 15, 1:47 pm)

RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Fri Aug 15, 2:17 pm)

RE: [malware-list] TALPA - a threat model? well sorta., , (Fri Aug 15, 4:08 pm)

Re: [malware-list] TALPA - a threat model? well sorta., , (Fri Aug 15, 2:06 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Fri Aug 15, 4:17 pm)

Re: [malware-list] TALPA - a threat model? well sorta., , (Fri Aug 15, 4:05 pm)

Re: [malware-list] TALPA - a threat model? well sorta., , (Fri Aug 15, 9:18 am)

Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Fri Aug 15, 1:04 pm)

RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Fri Aug 15, 2:09 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Helge Hafting, (Mon Aug 18, 6:09 am)

Re: [malware-list] TALPA - a threat model? well sorta., , (Mon Aug 18, 6:25 am)

Re: [malware-list] TALPA - a threat model? well sorta., Peter Zijlstra, (Mon Aug 18, 6:14 am)

Re: [malware-list] TALPA - a threat model? well sorta., , (Mon Aug 18, 6:24 am)

Re: TALPA - a threat model? well sorta., Arjan van de Ven, (Thu Aug 14, 11:57 am)

Re: TALPA - a threat model? well sorta., Theodore Tso, (Wed Aug 13, 2:15 pm)

Re: TALPA - a threat model? well sorta., Eric Paris, (Wed Aug 13, 3:02 pm)

Re: TALPA - a threat model? well sorta., Theodore Tso, (Wed Aug 13, 3:29 pm)

Re: [malware-list] TALPA - a threat model? well sorta., , (Thu Aug 14, 5:30 am)

Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Thu Aug 14, 9:24 am)

Re: [malware-list] TALPA - a threat model? well sorta., Eric Paris, (Thu Aug 14, 9:48 am)

Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Thu Aug 14, 11:50 am)

Re: [malware-list] TALPA - a threat model? well sorta., Pavel Machek, (Fri Aug 15, 10:37 am)

Re: [malware-list] TALPA - a threat model? well sorta., Eric Paris, (Thu Aug 14, 1:29 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Thu Aug 14, 3:17 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Christoph Hellwig, (Thu Aug 14, 3:34 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Thu Aug 14, 3:41 pm)

Re: [malware-list] TALPA - a threat model? well sorta., , (Thu Aug 14, 9:44 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Thu Aug 14, 10:04 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Alan Cox, (Fri Aug 15, 4:51 am)

Re: [malware-list] TALPA - a threat model? well sorta., , (Fri Aug 15, 12:48 am)

Re: [malware-list] TALPA - a threat model? well sorta., Arjan van de Ven, (Thu Aug 14, 11:41 pm)

Re: [malware-list] TALPA - a threat model? well sorta., , (Fri Aug 15, 1:05 am)

Re: [malware-list] TALPA - a threat model? well sorta., , (Fri Aug 15, 1:36 am)

Re: [malware-list] TALPA - a threat model? well sorta., Johannes Weiner, (Fri Aug 15, 1:12 am)

Re: [malware-list] TALPA - a threat model? well sorta., , (Fri Aug 15, 1:28 am)

Re: [malware-list] TALPA - a threat model? well sorta., Christoph Hellwig, (Thu Aug 14, 4:20 pm)

Re: [malware-list] TALPA - a threat model? well sorta., J. Bruce Fields, (Thu Aug 14, 5:21 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Theodore Tso, (Thu Aug 14, 7:34 pm)

Re: [malware-list] TALPA - a threat model? well sorta., J. Bruce Fields, (Tue Aug 19, 5:43 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Eric Paris, (Thu Aug 14, 3:20 pm)

RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Thu Aug 14, 8:03 am)

RE: [malware-list] TALPA - a threat model? well sorta., , (Thu Aug 14, 8:27 am)

Re: [malware-list] TALPA - a threat model? well sorta., Pavel Machek, (Fri Aug 15, 10:31 am)

RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Wed Aug 13, 5:15 pm)

Re: TALPA - a threat model? well sorta., Arjan van de Ven, (Wed Aug 13, 2:21 pm)

Re: TALPA - a threat model? well sorta., , (Thu Aug 14, 5:18 am)

Re: TALPA - a threat model? well sorta., Greg KH, (Wed Aug 13, 12:57 pm)

Re: TALPA - a threat model? well sorta., Alan Cox, (Wed Aug 13, 12:24 pm)

Re: TALPA - a threat model? well sorta., Arnd Bergmann, (Thu Aug 14, 9:00 am)

Re: TALPA - a threat model? well sorta., Christoph Hellwig, (Wed Aug 13, 1:07 pm)

Re: TALPA - a threat model? well sorta., Eric Paris, (Wed Aug 13, 12:47 pm)

Re: TALPA - a threat model? well sorta., Alan Cox, (Wed Aug 13, 12:37 pm)

Re: TALPA - a threat model? well sorta., Eric Paris, (Wed Aug 13, 1:00 pm)

Re: TALPA - a threat model? well sorta., Alan Cox, (Wed Aug 13, 3:59 pm)

RE: [malware-list] TALPA - a threat model? well sorta., Press, Jonathan, (Wed Aug 13, 5:24 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Rik van Riel, (Wed Aug 13, 5:35 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Jan Harkes, (Fri Aug 15, 4:16 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Arjan van de Ven, (Fri Aug 15, 6:05 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Eric Paris, (Sun Aug 17, 7:19 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Alan Cox, (Mon Aug 18, 11:33 am)

Re: [malware-list] TALPA - a threat model? well sorta., Rik van Riel, (Mon Aug 18, 12:43 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Arjan van de Ven, (Sun Aug 17, 7:26 pm)

Re: [malware-list] TALPA - a threat model? well sorta., David Collier-Brown, (Sun Aug 17, 5:11 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Alan Cox, (Wed Aug 13, 5:23 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Eric Paris, (Thu Aug 14, 11:25 pm)

Re: [malware-list] TALPA - a threat model? well sorta., Alan Cox, (Wed Aug 13, 5:13 pm)

Navigation

Popular discussions


linux-kernel:
Greg Kroah-Hartman	[PATCH 008/196] Chinese: add translation of volatile-considered-harmful.txt
Amit K. Arora	[RFC] Heads up on sys_fallocate()
Bart Van Assche	Integration of SCST in the mainstream Linux kernel
Linus Torvalds	Re: Slow DOWN, please!!!
git:

linux-netdev:
Gerrit Renker	[PATCH 0/37] dccp: Feature negotiation - last call for comments
David Miller	Re: [PATCH] pkt_sched: Destroy gen estimators under rtnl_lock().
David Miller	[GIT]: Networking
Natalie Protasevich	[BUG] New Kernel Bugs
openbsd-misc:

Colocation donated by:

Online users

tanggana93

Syndicate