Anonymous_User Absent Member.
Absent Member.
1556 views

OES 2 and AV software

I'm not sure if this is the right forum.

Anyone know if the AV vendors work "better" with NSS volumes on OES 2
now?

I believe Trend always worked okay.

I'm more curious as to McAfee LinuxShield

I know the old version required a kernel hook, which I don't know if
that's a good thing or a bad thing.

Labels (2)
0 Likes
4 Replies
Anonymous_User Absent Member.
Absent Member.

Re: OES 2 and AV software

m_jonis,

It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

Has your problem been resolved? If not, you might try one of the following options:

- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)

Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html

If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.

Good luck!

Your Novell Product Support Forums Team
http://support.novell.com/forums/


0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: OES 2 and AV software

Well..... i'm using Kaspersky and I got no problems scanning NSS volumes
mounted under /media/nss/
They scan it like a normal fileshare... i tried copy some eicar-test-string
and it goes to the muck.
Why do I actually need a NSS aware AntiVirus Scanning software?



"m_jonis" <m_jonis@hotmail.com> skrev i meddelandet
news:MPG.21a53fda327fd4f1989b7b@support-forums.novell.com...
> I'm not sure if this is the right forum.
>
> Anyone know if the AV vendors work "better" with NSS volumes on OES 2
> now?
>
> I believe Trend always worked okay.
>
> I'm more curious as to McAfee LinuxShield
>
> I know the old version required a kernel hook, which I don't know if
> that's a good thing or a bad thing.
>


0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: OES 2 and AV software

In article <Hsc1j.159$k06.125@kovat.provo.novell.com>, apan@apa.com
says...
> Well..... i'm using Kaspersky and I got no problems scanning NSS volumes
> mounted under /media/nss/
> They scan it like a normal fileshare... i tried copy some eicar-test-string
> and it goes to the muck.
> Why do I actually need a NSS aware AntiVirus Scanning software?
>
>


So that it can scan NSS volumes on OES Linux?

I think that some software just won't do it because it's expecting a
pure Linux file system.

And I think the ones that "can" do it may have trouble with the extended
attributes and whatnot, so that's why you want one that is NSS aware.

Of the ones that I can think of Kaspersky and Trend were the two that
came to mind that do and have worked with NSS since OES 1.

It's the Symantec and McAfee that I'm not 100% sure of.

I seem to remember some complaints about McAfee because it utilized a
kernel hook driver or something.

>
> "m_jonis" <m_jonis@hotmail.com> skrev i meddelandet
> news:MPG.21a53fda327fd4f1989b7b@support-forums.novell.com...
> > I'm not sure if this is the right forum.
> >
> > Anyone know if the AV vendors work "better" with NSS volumes on OES 2
> > now?
> >
> > I believe Trend always worked okay.
> >
> > I'm more curious as to McAfee LinuxShield
> >
> > I know the old version required a kernel hook, which I don't know if
> > that's a good thing or a bad thing.
> >

>
>

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: OES 2 and AV software

Well, NSS volumes are mounted under /media/nss and is fully
readable/writeable by user root.
Root can copy files into NSS volume ie to users homedir and such.

"m_jonis" <m_jonis@hotmail.com> skrev i meddelandet
news:MPG.21b606835bb8cc5f989ba7@forums.novell.com...
> In article <Hsc1j.159$k06.125@kovat.provo.novell.com>, apan@apa.com
> says...
>> Well..... i'm using Kaspersky and I got no problems scanning NSS volumes
>> mounted under /media/nss/
>> They scan it like a normal fileshare... i tried copy some
>> eicar-test-string
>> and it goes to the muck.
>> Why do I actually need a NSS aware AntiVirus Scanning software?
>>
>>

>
> So that it can scan NSS volumes on OES Linux?
>
> I think that some software just won't do it because it's expecting a
> pure Linux file system.
>
> And I think the ones that "can" do it may have trouble with the extended
> attributes and whatnot, so that's why you want one that is NSS aware.
>
> Of the ones that I can think of Kaspersky and Trend were the two that
> came to mind that do and have worked with NSS since OES 1.
>
> It's the Symantec and McAfee that I'm not 100% sure of.
>
> I seem to remember some complaints about McAfee because it utilized a
> kernel hook driver or something.
>
>>
>> "m_jonis" <m_jonis@hotmail.com> skrev i meddelandet
>> news:MPG.21a53fda327fd4f1989b7b@support-forums.novell.com...
>> > I'm not sure if this is the right forum.
>> >
>> > Anyone know if the AV vendors work "better" with NSS volumes on OES 2
>> > now?
>> >
>> > I believe Trend always worked okay.
>> >
>> > I'm more curious as to McAfee LinuxShield
>> >
>> > I know the old version required a kernel hook, which I don't know if
>> > that's a good thing or a bad thing.
>> >

>>
>>


0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.