Cc: Arjan van de Ven <arjan@...>, Press, Jonathan <Jonathan.Press@...>, Greg KH <greg@...>, <linux-kernel@...>, <malware-list@...>, <linux-security-module@...>
On Tue, 2008-08-05 at 20:30 -0400, Rik van Riel wrote:
In the patches I posted, "checks" are done at open and close if the
result is not already in the cache. Every write invalidates the cache
and thus the next open/close will do a "check."
So the longer a process keeps a file open the longer it is susceptible
to "unclean" data existing in that file.
--