看板FB_security
标 题md(4) (swap-base) disks not cleaned on creation
发信站NCTU CS FreeBSD Server (Wed Nov 7 03:46:58 2012)
转信站ptt!csnews.cs.nctu!news.cs.nctu!.cs.nctucs.nctu!.org!ownorg!owner-free
Hi,
When creating a swap based md(4) it may contain data which to me feels
like a security leak:
# mdconfig -a -t swap -s 1m
md0
# hd /dev/md0
00000000 c0 9b a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |=C0.=A8.....=
..\S.....|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............=
.....|
*
00000250 38 9f a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |8.=A8......\=
S.....|
00000260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............=
.....|
*
00000330 88 a0 a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |.=A0=A8.....=
..\S.....|
00000340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............=
.....|
*
00000370 e8 a0 a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |=E8=A0=A8...=
....\S.....|
00000380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............=
.....|
*
000005b0 48 a4 a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |H=A4=A8.....=
..\S.....|
000005c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............=
.....|
*
^C
# ls -l /dev/md0
crw-r----- 1 root operator 0xc8 Nov 6 19:42 /dev/md0
#
Although not world-readable, it just doesn't feel right to me.
Any thoughts?
With kind regards,
Paul Schenkeveld
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"