Message-ID: <440C0175.7040909@aitel.hist.no>
Date: Mon, 06 Mar 2006 10:31:33 +0100
From: Helge Hafting <helge.hafting@aitel.hist.no>
User-Agent: Debian Thunderbird 1.0.7 (X11/20051017)
MIME-Version: 1.0
To: jonathan@jonmasters.org
CC: Chris Ball <cjb@mrao.cam.ac.uk>,
       Linux Kernel <linux-kernel@vger.kernel.org>
Subject: Re: [OT] inotify hack for locate
References: <35fb2e590603051336t5d8d7e93i986109bc16a8ec38@mail.gmail.com>	 <yd3bqwkbgsi.fsf@islay.ra.phy.cam.ac.uk> <35fb2e590603051704k120e0257wb39c3e3eb1cf0b49@mail.gmail.com>
In-Reply-To: <35fb2e590603051704k120e0257wb39c3e3eb1cf0b49@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 917
Lines: 24

Jon Masters wrote:

>You're right. What I want really is to be able to bind to a netlink
>socket and get told about particular file IO operations I'm interested
>in for the /whole/ of a filesystem. The same kind of thing that real
>time anti-virus/anti-spam people want to do anyway.
>
>  
>
Do they?
I thought all this mail processing could be done in the mailserver
and/or mail reader.  Why detect spam by looking for generic file
creation when you can trivially tap into mail as it arrives?

As for the non-existent virus problem - it is mostly prevented
by users not being administrators.  And you can go further
with a readonly /usr and a noexec /home.

Helge Hafting
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/