Re: [malware-list] [RFC 0/5] [TALPA] Intro to a linux interfaceforon access scanning

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
From: Eric Paris
Date: Tuesday, August 5, 2008 - 6:55 pm

On Tue, 2008-08-05 at 20:30 -0400, Rik van Riel wrote:

In the patches I posted, "checks" are done at open and close if the
result is not already in the cache.  Every write invalidates the cache
and thus the next open/close will do a "check."

So the longer a process keeps a file open the longer it is susceptible
to "unclean" data existing in that file.

--
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
Re: [malware-list] [RFC 0/5] [TALPA] Intro to a linux inte ..., Eric Paris, (Tue Aug 5, 6:55 pm)
Re: [malware-list] [RFC 0/5] [TALPA] Intro to a linux inte ..., David Collier-Brown, (Wed Aug 6, 4:31 am)
Sidebar to [malware-list] [RFC 0/5] [TALPA] Intro to a lin ..., David Collier-Brown, (Wed Aug 6, 4:40 am)
Re: [malware-list] [RFC 0/5] [TALPA] Intro to a linuxinter ..., David Collier-Brown, (Mon Aug 11, 9:11 am)