lkml.org 
[lkml]   [2008]   [Aug]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [malware-list] [RFC 0/5] [TALPA] Intro to a linux interface for on access scanning
From
Date
Eric Paris wrote on 05/08/2008 20:46:03:

> On Mon, 2008-08-04 at 17:51 -0700, Greg KH wrote:
> > On Mon, Aug 04, 2008 at 08:32:54PM -0400, Eric Paris wrote:
>
> > Oh, and after that, not using a binary interface, have we not learned
> > from the ioctl mess? I sure thought we had...
>
> I don't see a reason why we can't use strings and key=value pairs for
> any metadata being sent back and forth. That seem more reasonable?

Should be OK from my point of view assuming we keep cache and basic
filesystem exclusions in kernel. Otherwise it would be too much work (I am
talking about CPU time) to do with each and every interception.

Tvrtko


Sophos Plc, The Pentagon, Abingdon Science Park, Abingdon,
OX14 3YP, United Kingdom.

Company Reg No 2096520. VAT Reg No GB 348 3873 20.



\
 
 \ /
  Last update: 2008-08-06 11:31    [W:0.523 / U:0.260 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site