--Apple-Mail-14-184286082
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII; format=flowed


On Sep 30, 2004, at 5:33 PM, Daniel Carosone wrote:

> Sure, if I give (say) a user access to that particular partition, for
> usermounted filesystems, they can then rewrite my disklabel as well.

Right now, bounds_check_with_label() (a machine-dependent function) 
ensures that writes to the "label area" are disallowed unless the disk 
is in "writing a new label" state.

How that should be done in a generic way with wedges is really an open 
question.  Perhaps the label discovery module should register a list of 
"protected" extents.  But I don't think creating special wedges is the 
right solution, that can be written only by writing to the parent 
disk's RAW_PART.

         -- Jason R. Thorpe <thorpej@shagadelic.org>


--Apple-Mail-14-184286082
content-type: application/pgp-signature; x-mac-type=70674453;
	name=PGP.sig
content-description: This is a digitally signed message part
content-disposition: inline; filename=PGP.sig
content-transfer-encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (Darwin)

iD8DBQFBXNXOOpVKkaBm8XkRAs98AJsHPFSPQdfD5e5LsXc0IY6IZ4tHEQCZAabF
iIP9e2tzZb+Axggy5AJbq68=
=EvY/
-----END PGP SIGNATURE-----

--Apple-Mail-14-184286082--