Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751177AbYLAKDx (ORCPT ); Mon, 1 Dec 2008 05:03:53 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751954AbYLAKDm (ORCPT ); Mon, 1 Dec 2008 05:03:42 -0500 Received: from earthlight.etchedpixels.co.uk ([81.2.110.250]:54115 "EHLO lxorguk.ukuu.org.uk" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1751636AbYLAKDl (ORCPT ); Mon, 1 Dec 2008 05:03:41 -0500 Date: Mon, 1 Dec 2008 10:03:50 +0000 From: Alan Cox To: weigelt@metux.de Cc: linux kernel list Subject: Re: scanner interface proposal was: [TALPA] Intro to a linux interface for on access scanning (fwd) Message-ID: <20081201100350.34af705e@lxorguk.ukuu.org.uk> In-Reply-To: <20081201005142.GA27387@nibiru.local> References: <20081123223753.GA16424@nibiru.local> <20081123230306.48bc0274@lxorguk.ukuu.org.uk> <20081201005142.GA27387@nibiru.local> X-Mailer: Claws Mail 3.5.0 (GTK+ 2.12.12; x86_64-redhat-linux-gnu) Organization: Red Hat UK Cyf., Amberley Place, 107-111 Peascod Street, Windsor, Berkshire, SL4 1TE, Y Deyrnas Gyfunol. Cofrestrwyd yng Nghymru a Lloegr o'r rhif cofrestru 3798903 Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1309 Lines: 37 On Mon, 1 Dec 2008 01:51:42 +0100 Enrico Weigelt wrote: > * Alan Cox wrote: > > > Fine. Why not just putting this into a userland filesystem ? > > > > 1. Performance > > Does it really hurt so bad, compared with all actual AV stuff ? > It has to go to userland anyway, in case you don't intend to > put the scanner into the kernel ;-o That depends on the scanning and what you are using it for - at least part of the interest is in asynchronous indexing systems in which case the answer appears to be no, the scanner doesn't trash your performance. > > > 2. Networked file systems > > What's the problem ? > (btw: 9P already *IS* an network filesystem ;-P) Try 9P with an NFS backing store. Try a cluster file system. > > 3. Ioctls > > Ah, just forgot a while that this crap still exists ;-o > > BUT: do the affected dirs have to contain devices ? > Is there any point for pulling /dev through the AV scanner ? Lots of ioctls apply to files. Please think about what is involved rather than just assuming. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/