lkml.org 
[lkml]   [2007]   [Nov]   [30]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: Out of tree module using LSM
    > Fortunately for all concerned, although Alan's self-modifying code is indeed a
    > possibility, it's much less of an issue than the sort of malware that can be
    > found with a simple "find this 27-byte sequence, which will be found in either
    > block 36 or 37 of the file"

    Thats a very old model of detection ;)


    There is another usage case for this stuff as well - which is on the fly
    indexing of material. An indexer has the same basic needs as a virus
    checker (without the blocking aspect) and doesn't have to be robust
    against sneaky material.

    Alan
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2007-11-30 14:41    [W:0.142 / U:0.508 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site