Subject: Re: nfs optimization and veriexec
To: YAMAMOTO Takashi <yamt@mwd.biglobe.ne.jp>
From: Brett Lymn <blymn@baesystems.com.au>
List: tech-security
Date: 10/29/2007 21:30:09
On Mon, Oct 29, 2007 at 07:49:59PM +0900, YAMAMOTO Takashi wrote:
> 
> as some people asked me to explain more...
> 

I think the approach that Simon suggested is probably workable.  If
veriexec is active on the mount then there should be a fileassoc table
for the mount point, you can look up the handle in that fileassoc, if
it is there then don't short circuit otherwise it is safe to do so.

If you like I can fix that for you.

-- 
Brett Lymn
"Warning:
The information contained in this email and any attached files is
confidential to BAE Systems Australia. If you are not the intended
recipient, any use, disclosure or copying of this email or any
attachments is expressly prohibited.  If you have received this email
in error, please notify us immediately. VIRUS: Every care has been
taken to ensure this email and its attachments are virus free,
however, any loss or damage incurred in using this email is not the
sender's responsibility.  It is your responsibility to ensure virus
checks are completed before installing any data sent in this email to
your computer."