Re: [malware-list] [RFC 0/5] [TALPA] Intro to alinuxinterfaceforonaccess scanning

From: Eric Paris
Date: Wed Aug 06 2008 - 14:07:16 EST


On Wed, 2008-08-06 at 12:25 -0400, Rik van Riel wrote:
> On Wed, 6 Aug 2008 17:12:56 +0100
> tvrtko.ursulin@xxxxxxxxxx wrote:
> > Rik van Riel wrote on 06/08/2008 16:46:04:
>
> > > More importantly, getting info on which bytes in a file changed
> > > will also help backup programs and disk indexing programs.
> >
> > True, but Nick mentioned some huge issues with access after close and
> > munmap in one of your previous postings. It sounds to me that would be a
> > huge VM/filesystem work to actually enable things like this.
>
> A universally useful large change is often easier to get into
> the Linux kernel than a single-purpose hack.

Over engineering in a void for some supposed someday user isn't a good
idea either. If there are other people interested in working together
to come up with a solution to multiple needs I'm here to help!

-Eric

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/