[OpenAFS] virus scanner?
Tue, 18 Mar 2003 08:17:27 +0000
It is possible to use something like Norton AV to scan AFS space.
I have done this and it works OK.
However, some AFS cells are pretty big and it is a non-trivial
task to scan every byte from a Windoze client running NAV.
I also don't like the idea of running processes with admin access
from inherently insecure systems.
The idea of hooking an anti-virus scan into the backup seems a neat idea.
Some email MIME AV sweepers may be adapted for this?
It could also help to classify a cell's data into static and dynamic data.
"Static" would include things like on-line documentation and
files that are generally ReadOnly to 99% of cell users.
"Dynamic" would include $HOMEs, $PROJECTs, and spool directories.
It would make more sense to focus more of the anti-virus activity
on the "dynamic" data rather than the "static".
Klaas Hagemann wrote:
> Hi to all,
> we want to implemet a system wide virus protetion system (or we have
> That is why we want to scan the afs filespace.
> Since the virus scanner has no access to the afs space on the client
> side (it runs as root normally) and the volumes are not in "plain
> text" on the server side, we have some problems.
> How do you do virus protection? Is there any way to scan the volumes
> directly on the file-server without having access to the file-space?
> For backup we want to d something like this: vos dump | vos restore.
> Does anybody of you know a virus scanner which could work like this:
> vos dump | virusscanner | vos restore ?
> On the linux side the virus protection is not critical, but the afs
> system is also used by windows client :-(... So i have to care about it.
> Any ideas are welcome.
> OpenAFS-info mailing list