WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

RE: [Xen-users] Anti-virus for use in para-virtualized Xen

To: "Nico Kadel-Garcia" <nkadel@xxxxxxxxx>, xen-users@xxxxxxxxxxxxxxxxxxx
Subject: RE: [Xen-users] Anti-virus for use in para-virtualized Xen
From: "Petersson, Mats" <Mats.Petersson@xxxxxxx>
Date: Wed, 4 Apr 2007 17:45:06 +0200
Delivery-date: Wed, 04 Apr 2007 08:44:40 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <4613C74D.4080402@xxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Thread-index: Acd2z8RK5e7W054GRVCKZ4hU43KnhQAACVXg
Thread-topic: [Xen-users] Anti-virus for use in para-virtualized Xen
 

> -----Original Message-----
> From: xen-users-bounces@xxxxxxxxxxxxxxxxxxx 
> [mailto:xen-users-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of 
> Nico Kadel-Garcia
> Sent: 04 April 2007 16:42
> To: xen-users@xxxxxxxxxxxxxxxxxxx
> Subject: [Xen-users] Anti-virus for use in para-virtualized Xen
> 
> 
> I've been looking at anti-virus software for Xen use on Linux 
> systems, 
> on both Dom0 and DomU, in industrial environments. Reviewing 
> documentation on various packages seems to show that all the 
> commercial 
> ones insist on sticking kernel modules into a limited set of standard 
> known kernels. This of course creates some serious risks until the 
> anti-virus packages are developed in and tested in Xen environments, 
> especially for para-virtualized environments.

I presume the reason they have a standard set of kernels is that they
"meddle" with the kernel and don't supply source-code, which means that
a Xenified kernel doesn't match the expected kernel layout, and thus
can't use the module? [And it's understandable from some aspects that
the AV guys don't really want the V-guys to see the source-code...] 
> 
> Has anyone out there been using any such commercial packages? Or am I 
> stuck with tools like ClamAV to avoid complicating my life with 
> unfortunate kernel interactions?

Possibly stuck... 

--
Mats
> 
>              Nico
> 
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users
> 
> 
> 



_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users