on-access events?

on-access events?

[John Richard Moser]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

What kinds of on-access event driving is there for Linux?  I'm looking
at Dazuko[1] right now, but not sure about what else is out there.  I'm
sure I've seen several; is there anything in the kernel?

These things would be good for ClamAV[2] and for systems similar to the
Zero-install system[3], although 0install uses its own stuff.

[1] http://www.dazuko.org
[2] http://clamav.net
[3] http://0install.net

- --
All content of all messages exchanged herein are left in the
Public Domain, unless otherwise explicitly stated.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBycHGhDd4aOud5P8RAkStAJ48rOi/baorTNBuOEsHLi6a9b6GBwCeNELX
LNbZej0QoF2gy93qB9mem2I=
=i9c7
-----END PGP SIGNATURE-----

Re: on-access events?

[Amon Ott]

[-- Attachment #1: Type: text/plain, Size: 590 bytes --]

On Mittwoch, 22. Dezember 2004 19:49, John Richard Moser wrote:
> What kinds of on-access event driving is there for Linux?  I'm 
looking
> at Dazuko[1] right now, but not sure about what else is out there.  
I'm
> sure I've seen several; is there anything in the kernel?

Besides the LSM interface in 2.6 kernels there is also the RSBAC 
framework for 2.4 and 2.6, where you can register from kernel modules 
at runtime, http://www.rsbac.org.

Dazuko plus caching has also been integrated as RSBAC module.

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22

[-- Attachment #2: signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: on-access events?

[John Richard Moser]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'm looking for a hint on which will possibly go into mainline kernel,
if any.  Right now there's supposedly a few things built on Dazuko, like
Clamuko (ClamAV on-access scanning); but I've yet to really encounter
anything aside from that that use Dazuko so :)

I'm thinking of a lot of things that can be done with on-access control
from userspace.

RSBAC and LSM seem to do almost the same thing, except that RSBAC
actually comes with a lot of modules to use it (LSM/SELinux are separate
projects, but both integrated into the kernel, AFAIK).  I don't see
RSBAC going into mainline; I don't know which is better though, LSM or
RSBAC.  This brings to mind pointless and random proof-of-concept tasks,
such as porting SELinux to RSBAC; or porting LSM to RSBAC (as an rsbac
module), or RSBAC to LSM (as an lsm module).

Amon Ott wrote:
| On Mittwoch, 22. Dezember 2004 19:49, John Richard Moser wrote:
|
|>What kinds of on-access event driving is there for Linux?  I'm
|
| looking
|
|>at Dazuko[1] right now, but not sure about what else is out there.
|
| I'm
|
|>sure I've seen several; is there anything in the kernel?
|
|
| Besides the LSM interface in 2.6 kernels there is also the RSBAC
| framework for 2.4 and 2.6, where you can register from kernel modules
| at runtime, http://www.rsbac.org.
|
| Dazuko plus caching has also been integrated as RSBAC module.
|
| Amon.

- --
All content of all messages exchanged herein are left in the
Public Domain, unless otherwise explicitly stated.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBy0O6hDd4aOud5P8RAt/eAJ9y8cGnbqggMLgT1pGQ3MsF3d/uagCgi/se
uwj+n448vDMislspw7CndQQ=
=ljdg
-----END PGP SIGNATURE-----