NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: block device lock difference between netbsd-4 and netbsd-5

On Wed, Feb 03, 2010 at 07:44:57AM +0000, Michael van Elst wrote:
> (Thor Lancelot Simon) writes:
> >>> You can't open block device more than once in netbsd>  5.0.
> >It was never supposed to work.  Among other things, it's a severe
> >security hole.
> Why is it more of a security hole than accessing the raw device?

I didn't suggest that permitting access to the raw device for mounted
filesystems (or overlapping mounted filesystems) was not a security hole.

It's All Bad.  I don't understand why Elad's change to fix this entire
situation was rejected, but it shouldn't have been.  Any comprehensive
solution which fixes the problem of side-channel I/O to mounted
filesystems will almost certainly have the same effect that's being
objected to here: you won't be able to open the block device twice.


Home | Main Index | Thread Index | Old Index