Re: 2.6.27 kernels

On Thu, 28 Aug 2008 19:47:57 +0300
Sami Tikka <[email protected]> wrote:

> 
> Frantisek Hrbata kirjoitti 28.8.2008 kello 18.34:
> 
> > Is there any particular reason to distinguish between open/exec in  
> > the on-access
> > scanning besides logs or some other output?
> 
> Probably not. I just asked because F-Secure AV software has always had  
> settings for scan-on-open, scan-on-exec and scan-on-close. Scan-on- 
> close is nice-to-have and I have never heard anyone using just one of  
> scan-on-open or scan-on-exec.

AVG has also options for scanOnOpen, scanOnExec and scanOnCloseModified.
I think that is because dazuko provides such events :). Question is if
it is necessary to notify user-space scanner which event triggered the
scanning at all.

-FH