Re: [malware-list] [RFC 0/5] [TALPA] Intro to a linux interfacefor on access scanning

From: Greg KH
Date: Tue Aug 05 2008 - 13:09:33 EST


On Tue, Aug 05, 2008 at 12:25:03PM +0100, Alan Cox wrote:
> > Again, do it all in userspace (caching, and scanning). I still really
> > don't see the need to do this in the kernel becides it being "the way
> > people have always done it."
>
> We don't have notifiers for file segment changes that are scalable that
> far.

I agree, but if we did, would that help out a lot here? Lots of other
groups of people are needing/asking for something like this and if
someone can finally get it together to post something useful, that might
be a very good thing.

thanks,

greg k-h
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/