Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 6 Nov 2012 19:46:58 +0100
From:      Paul Schenkeveld <freebsd@psconsult.nl>
To:        freebsd-security@freebsd.org
Subject:   md(4) (swap-base) disks not cleaned on creation
Message-ID:  <20121106184658.GA24262@psconsult.nl>

next in thread | raw e-mail | index | archive | help
Hi,

When creating a swap based md(4) it may contain data which to me feels
like a security leak:

  # mdconfig -a -t swap -s 1m
  md0
  # hd /dev/md0
  00000000  c0 9b a8 00 08 00 00 00  00 5c 53 00 08 00 00 00  |À.¨......\S.....|
  00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  *
  00000250  38 9f a8 00 08 00 00 00  00 5c 53 00 08 00 00 00  |8.¨......\S.....|
  00000260  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  *
  00000330  88 a0 a8 00 08 00 00 00  00 5c 53 00 08 00 00 00  |. ¨......\S.....|
  00000340  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  *
  00000370  e8 a0 a8 00 08 00 00 00  00 5c 53 00 08 00 00 00  |è ¨......\S.....|
  00000380  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  *
  000005b0  48 a4 a8 00 08 00 00 00  00 5c 53 00 08 00 00 00  |H¤¨......\S.....|
  000005c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  *
  ^C
  # ls -l /dev/md0
  crw-r-----  1 root  operator  0xc8 Nov  6 19:42 /dev/md0
  #

Although not world-readable, it just doesn't feel right to me.

Any thoughts?

With kind regards,

Paul Schenkeveld



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20121106184658.GA24262>