Messages in this thread | | | Date | Wed, 6 Aug 2008 10:53:06 +1000 (EST) | From | jmorris@namei ... | Subject | Re: [malware-list] [RFC 0/5] [TALPA] Intro to a linux interfaceforon access scanning |
| |
On Tue, 5 Aug 2008, Rik van Riel wrote:
> What exactly are the threat models you want to protect against? > > Once we have the answer to that question, we can figure out > whether the current patch set addresses the threat model or > whether alternate approaches are needed.
Alas, we've been here before.
http://article.gmane.org/gmane.linux.kernel/608634
On Thu, 29 Nov 2007, Al Viro wrote:
> Incidentally, I would really love to see the threat profile we are > talking about.
Exactly.
Please come up with a set of requirements that can be reviewed by the core kernel folk, and perhaps then focus on how to meet those requirements once they have been accepted.
To be very clear, so we don't waste any _more_ time and effort on this:
The anti-malware folk need to first provide a clearly understandable and complete description of the problem including a characterization of the threat.
The next step is to propose a design which addresses the problem, and to clearly and completely demonstrate how it does so.
Only then will it be possible to conduct an informed discussion on the underlying case for malware scanning and its possible implementation.
- James -- James Morris <jmorris@namei.org>
| |