Re: RSBAC v1.0.6 for 2.1.128

A. Ott (ao@ao.morpork.shnet.org)
23 Nov 1998 11:41:00 +0100


********* ***************** ********** **** ***** ***** ************
To subject Re: RSBAC v1.0.6 for 2.1.128
pavel@bug.ucw.cz (Pavel Machek) wrote:
********** ******************** ****** ******** ******* *************

> Hi!
>
> > MS: Malware Scan. Scan all files for malware on execution
> > (optionally on all file read accesses or on all TCP/UDP read
> > accesses), deny access if infected. Currently the Linux viruses
> > Bliss.A and Bliss.B and a handfull of others are detected. See our
> > paper on malware detection and avoidance for The Third Nordic
> > Workshop on Secure IT Systems (Nordsec'98)
>
> This might be interesting to ultra people, if it is done efficient
> enough. If I understand it correctly, ultra will hang if nasty
> sequence is executed, even from user mode.

Give me the significant code part, and I will include it into the scan
strings.

Amon.

--
Please remove second ao for E-Mail reply - no spam please!
## CrossPoint v3.11 ##

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/