md(4) (swap-base) disks not cleaned on creation

看板FB_security作者時間12年前 (2013/04/27 12:34), 編輯推噓0(000)
留言0則, 0人參與, 最新討論串7/7 (看更多)
Hi, When creating a swap based md(4) it may contain data which to me feels like a security leak: # mdconfig -a -t swap -s 1m md0 # hd /dev/md0 00000000 c0 9b a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |=C0.=A8.....= ..\S.....| 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............= .....| * 00000250 38 9f a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |8.=A8......\= S.....| 00000260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............= .....| * 00000330 88 a0 a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |.=A0=A8.....= ..\S.....| 00000340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............= .....| * 00000370 e8 a0 a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |=E8=A0=A8...= ....\S.....| 00000380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............= .....| * 000005b0 48 a4 a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |H=A4=A8.....= ..\S.....| 000005c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............= .....| * ^C # ls -l /dev/md0 crw-r----- 1 root operator 0xc8 Nov 6 19:42 /dev/md0 # Although not world-readable, it just doesn't feel right to me. Any thoughts? With kind regards, Paul Schenkeveld _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
文章代碼(AID): #1HUrLAek (FB_security)
討論串 (同標題文章)
文章代碼(AID): #1HUrLAek (FB_security)