Find the answer to your Linux question:
Results 1 to 7 of 7
Hi everybody! I need to find some kernel quaratine module or source code. I found clamav but i don't found exactly quaratine module in the source. Know's anybody some quarantine ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Just Joined!
    Join Date
    Jan 2010
    Location
    Hungary
    Posts
    3

    Quarantine module


    Hi everybody!

    I need to find some kernel quaratine module or source code.
    I found clamav but i don't found exactly quaratine module in the source.

    Know's anybody some quarantine module?
    Where can i find one?

    Please help!

    Thanks.

  2. #2
    Linux Guru rokytnji's Avatar
    Join Date
    Jul 2008
    Location
    Desert
    Posts
    3,997
    I don't know what you mean. But here goes from a West texas Southern Boy anyways.

    You can blacklist in stead of Quarintine any module inthe kernel you wish at bootup.

    Ubuntu Manpage: modprobe.conf ? Configuration file/directory for modprobe
    Linux Registered User # 475019
    Lead,Follow, or get the heck out of the way. I Have a Masters in Raising Hell
    Tech Books
    Free Linux Books
    Newbie Guide
    Courses at Home

  3. #3
    oz
    oz is offline
    forum.guy
    Join Date
    May 2004
    Location
    arch linux
    Posts
    18,733
    Welcome to the forums!

    Not sure that I understand the question, either. Are you talking about Linux Security Modules. such as SELinux?

    Linux Security Modules - Wikipedia, the free encyclopedia
    oz

  4. #4
    Just Joined!
    Join Date
    Jan 2010
    Location
    Hungary
    Posts
    3
    Sorry oz, i think i put my quote in wrong category.

    I replied to rokytnji the following!

    Thanks for quick reply!

    I'am not good in english, so i'am try explain what i lookin for!

    I need to find a module, which can hold files in quarantine.

    E.g.:
    The module starts at the boot sequence.
    Every user has a folder name ~/quarantine.
    The module have control to any file access, and if the needed file is in quarantine the module can refuse the access.

    User or some other program can put files in to the quarantine folder, and files can be taken out from quarantine.

    I hope you can now understand what i'am lookin' for.

    I don't know that some module exist at all.

    Sorry for the bad english and thanks for help.

  5. #5
    Just Joined!
    Join Date
    Aug 2009
    Posts
    83
    For on-access scanning of files there's a FUSE filesystem (can't remember its name though) and the Dazuko(.dnsalias.org) kernel module?

  6. #6
    Linux Guru Lazydog's Avatar
    Join Date
    Jun 2004
    Location
    The Keystone State
    Posts
    2,677
    Sounds like he is trying to do something like Windows does and moves virus infected files to a "quarantine" folder where the user cannot access them.

    A simple thing would be to create the dir and then change the permission on that dir so that only root can access it. Then ensure that the program that is doing the moving of the infected files has the rights needed to access the dir.

    Regards
    Robert

    Linux
    The adventure of a life time.

    Linux User #296285
    Get Counted

  7. #7
    Just Joined!
    Join Date
    Jan 2010
    Location
    Hungary
    Posts
    3
    Thanks for advice.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •