看板 FB_security 關於我們 聯絡資訊
Hi, When creating a swap based md(4) it may contain data which to me feels like a security leak: # mdconfig -a -t swap -s 1m md0 # hd /dev/md0 00000000 c0 9b a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |=C0.=A8.....= ..\S.....| 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............= .....| * 00000250 38 9f a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |8.=A8......\= S.....| 00000260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............= .....| * 00000330 88 a0 a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |.=A0=A8.....= ..\S.....| 00000340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............= .....| * 00000370 e8 a0 a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |=E8=A0=A8...= ....\S.....| 00000380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............= .....| * 000005b0 48 a4 a8 00 08 00 00 00 00 5c 53 00 08 00 00 00 |H=A4=A8.....= ..\S.....| 000005c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |............= .....| * ^C # ls -l /dev/md0 crw-r----- 1 root operator 0xc8 Nov 6 19:42 /dev/md0 # Although not world-readable, it just doesn't feel right to me. Any thoughts? With kind regards, Paul Schenkeveld _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"