[Dazuko-devel] Re: 2.6.27 kernels

[Jonathan Dumke]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> On Thu, 28 Aug 2008 19:47:57 +0300
> Sami Tikka <address@hidden> wrote:
> 
>> Frantisek Hrbata kirjoitti 28.8.2008 kello 18.34:
>>
[...]
>>> scanning besides logs or some other output?
>> Probably not. I just asked because F-Secure AV software has always had  
>> settings for scan-on-open, scan-on-exec and scan-on-close. Scan-on- 
>> close is nice-to-have and I have never heard anyone using just one of  
>> scan-on-open or scan-on-exec.
> 
> AVG has also options for scanOnOpen, scanOnExec and scanOnCloseModified.
> I think that is because dazuko provides such events :). Question is if
> it is necessary to notify user-space scanner which event triggered the
> scanning at all.
> 
> -FH 

In my opinion the scanOnExec option is a completly different to
scanOnOpen, example of my understanding folloes here:
sample cmd: vim ascript.sh
scanOnExec should scan the vim, cause it is execited
scanOnOpen should scan the script, cause it's opend or may be it scans
both vim and the edited file.

Just a nother thing. Because the kernel and its interfaces are still in
progress, I think it should be a good idea to encapsulate the needed
api-calls by a dazuko-framework-library.

Greets,
Jhony Walldorf
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFI2TCQMGZJvLjMOXERAkcNAKChiFDEnpAzucHIb8JTtkH6ZVPz5wCdEI5k
JKEgfhxvHm9aIYsHZ4cMNgY=
=VVJK
-----END PGP SIGNATURE-----