On 10/05/2009 03:52 PM, Karsten Bräckelmann wrote:
On Mon, 2009-10-05 at 15:44 -0400, Warren Togami wrote:
On 10/05/2009 02:53 PM, Karsten Bräckelmann wrote:
Well, the Sought rule-set (and thus Fraud sub-set) is being re-generated
every 4 hours -- with an exception of night-time, UTC.
They are really being generated every 4 hours when new patterns can be
tested for safety only during the nightly masscheck?
Yes, that's the very nature of the Sought process. Automatic pattern
extraction. These are not hand-written rules, and they are neither
candidates for inclusion in stock.
Also, the nightly masschecks are bound to a specific SVN revision, so
automatic or hand-written changes shortly after the deadline don't
affect the results.
What is the difference between JM_SOUGHT_FRAUD_[123] and JM_SOUGHT_[123]
in the nightly masschecks?
Perhaps I'm not understanding fully understanding how SOUGHT works.
http://taint.org/2007/03/05/134447a.html
http://taint.org/2007/08/04/200125a.html
How can rules be automatically generated and pushed to the channel every
4 hours and be manually vetted as described here?
Are the nightly masscheck results used at all to determine the safety of
SOUGHT sub-rules?
Warren Togami
wtog...@redhat.com
