Re: [malware-list] scanner interface proposal was: [TALPA] Intro linux interface for for access scanning

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
From: Eric Paris
Date: Wednesday, August 20, 2008 - 12:26 pm

On Wed, 2008-08-20 at 10:33 -0700, david@lang.hm wrote:


My belief is that if you choose to run a file scanner and that file
scanner gets the answer wrong you need to look at the file scanner.
There shouldn't be arbitrary overrides.  If you don't accept the results
of the scanner what's the point?  Tell you package manager scanner that
you changed it.


I don't understand what you mean about trust.  This is an argument for
kernel support now?  What is it that you say needs and what doesn't need
it?  Can you explain exactly what your perfect solution from top down?


And I saying we don't actually need any of this and if it is actually
needed by someone in the real world they can easily build their own
solution on top of my generic interface.  I'm not making the assertion
it is race free and don't think it is possible without making every
sequential (hahahaha.)  But I claim in the face of normal operation it's
fine.  My interface, as proposed, is very generic.  Much more so than
what I think you are trying to describe.  I couldn't make mine more
minimal or broad.

--
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
Re: [malware-list] scanner interface proposal was: [TALPA] ..., David Collier-Brown, (Mon Aug 18, 6:42 am)
Re: [malware-list] scanner interface proposal was: [TALPA] ..., Eric Paris, (Wed Aug 20, 12:26 pm)