On Monday, 08/04/2008 at 09:26 EDT, Marcel Bootsman
<[EMAIL PROTECTED]> wrote:
> The things that need protection is email and files.

While e-mail scanning makes sense (though it should be done on an outboard
scanner - not on the mainframe, IMO), I'm not sure the balance of "risk"
and "cost" are met for other files.  That is, you can certainly scan files
you run on mainframe Linux, but I suspect that
1. Any signature that the AV program would recognize will not execute on
the mainframe, giving itself away.
2. Any payload that will execute on the mainframe will not have a
signature that the AV program will recognize.

I will admit my ignorance on how signatures are created, however, so I
could be wrong. :-)

Alan Altmark
z/VM Development
IBM Endicott

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to