It is possible to use something like Norton AV to scan AFS space. I have done this and it works OK.
However, some AFS cells are pretty big and it is a non-trivial task to scan every byte from a Windoze client running NAV. I also don't like the idea of running processes with admin access from inherently insecure systems.
The idea of hooking an anti-virus scan into the backup seems a neat idea. Some email MIME AV sweepers may be adapted for this?
It could also help to classify a cell's data into static and dynamic data. "Static" would include things like on-line documentation and files that are generally ReadOnly to 99% of cell users.
"Dynamic" would include $HOMEs, $PROJECTs, and spool directories.
It would make more sense to focus more of the anti-virus activity on the "dynamic" data rather than the "static". -- cheers paul http://acm.org/~mpb
Klaas Hagemann wrote:
Hi to all,
we want to implemet a system wide virus protetion system (or we have to...).
That is why we want to scan the afs filespace.
Since the virus scanner has no access to the afs space on the client side (it runs as root normally) and the volumes are not in "plain text" on the server side, we have some problems.
How do you do virus protection? Is there any way to scan the volumes directly on the file-server without having access to the file-space?
For backup we want to d something like this: vos dump | vos restore.
Does anybody of you know a virus scanner which could work like this: vos dump | virusscanner | vos restore ?
On the linux side the virus protection is not critical, but the afs system is also used by windows client :-(... So i have to care about it.
Any ideas are welcome. Klaas
_______________________________________________ OpenAFS-info mailing list [EMAIL PROTECTED] https://lists.openafs.org/mailman/listinfo/openafs-info
_______________________________________________ OpenAFS-info mailing list [EMAIL PROTECTED] https://lists.openafs.org/mailman/listinfo/openafs-info
