[OpenAFS] virus scanner?

[Paul Blackburn]

Hello Klaas,

It is possible to use something like Norton AV to scan AFS space.
I have done this and it works OK.

However, some AFS cells are pretty big and it is a non-trivial
task to scan every byte from a Windoze client running NAV.
I also don't like the idea of running processes with admin access
from inherently insecure systems.

The idea of hooking an anti-virus scan into the backup seems a neat idea.
Some email MIME AV sweepers may be adapted for this?

It could also help to classify a cell's data into static and dynamic data.
"Static" would include things like on-line documentation and
files that are generally ReadOnly to 99% of cell users.

"Dynamic" would include $HOMEs, $PROJECTs, and spool directories.

It would make more sense to focus more of the anti-virus activity
on the "dynamic" data rather than the "static".
--
cheers
paul                            http://acm.org/~mpb

Klaas Hagemann wrote:

> Hi to all,
>
> we want to implemet a system wide virus protetion system (or we have 
> to...).
> That is why we want to scan the afs filespace.
> Since the virus scanner has no access to the afs space on the client 
> side (it runs as root normally) and the volumes are not in "plain 
> text" on the server side, we have some problems.
>
> How do you do virus protection? Is there any way to scan the volumes 
> directly on the file-server without having access to the file-space?
>
> For backup we want to d something like this: vos dump | vos restore.
> Does anybody of you know a virus scanner which could work like this: 
> vos dump | virusscanner | vos restore ?
>
> On the linux side the virus protection is not critical, but the afs 
> system is also used by windows client :-(... So i have to care about it.
>
> Any ideas are welcome.
> Klaas
>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info