Quaratine module

[stork]

Hi everybody!

I need to find some kernel quaratine module or source code.
I found clamav but i don't found exactly quaratine module in the source.

Know's anybody some quarantine module?
Where can i find one?

Please help!

Thanks.

[rokytnji]

I don't know what you mean. But here goes from a West texas Southern Boy anyways.

You can blacklist in stead of Quarintine any module inthe kernel you wish at bootup.

Ubuntu Manpage: modprobe.conf ? Configuration file/directory for modprobe

[oz]

Welcome to the forums!

Not sure that I understand the question, either. Are you talking about Linux Security Modules. such as SELinux?

Linux Security Modules - Wikipedia, the free encyclopedia

[stork]

Sorry oz, i think i put my quote in wrong category.

I replied to rokytnji the following!

Thanks for quick reply!

I'am not good in english, so i'am try explain what i lookin for!

I need to find a module, which can hold files in quarantine.

E.g.:
The module starts at the boot sequence.
Every user has a folder name ~/quarantine.
The module have control to any file access, and if the needed file is in quarantine the module can refuse the access.

User or some other program can put files in to the quarantine folder, and files can be taken out from quarantine.

I hope you can now understand what i'am lookin' for.

I don't know that some module exist at all.

Sorry for the bad english and thanks for help.

[unspawn]

For on-access scanning of files there's a FUSE filesystem (can't remember its name though) and the Dazuko(.dnsalias.org) kernel module?

[Lazydog]

Sounds like he is trying to do something like Windows does and moves virus infected files to a "quarantine" folder where the user cannot access them.

A simple thing would be to create the dir and then change the permission on that dir so that only root can access it. Then ensure that the program that is doing the moving of the infected files has the rights needed to access the dir.

[stork]

Thanks for advice.