pajp/fsmactweaks — Issue #1: Temporarily halt on-access scanning
Author: pajp
Created: 2012-02-27 15:09:07+00:00
State: open

User story: the user is in a non-connected or otherwise safe environment. On-access scanning can be disabled for convenience or to work around some problems. However, it is important to remember to re-enable on-access scanning when leaving the safe environment. One way of doing this is to monitor mount points and network interfaces. If any of them changes, re-enable on-access scanning if it has been disabled.

For example through a cron job like this:

* * * * * (ifconfig|grep inet);mount) > current; if diff current prev; then kextload com.f-secure.fsav; cp current prev; fi