Another new ABI for fanotify
Another new ABI for fanotify
Posted Nov 12, 2009 11:18 UTC (Thu) by etienne_lorrain@yahoo.fr (guest, #38022)Parent article: Another new ABI for fanotify
> The intended use case is malware-scanning utilities
Some would say the other intended use case is malware-spreading utilities, it is better to "infect" executables which are often executed than those who lay dormant... and having a standard interface for viruses would greatly simplify their development.
Moreover, because it seems you should be able to use multiple independant virus checker, you can hook "under" or "over" a virus checker, to hide your virus from upper layers, or to add it once the file has been certified clean.
