Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 17 Jun 2012 17:51:05 +0300
From:      Efstratios Karatzas <gpf.kira@gmail.com>
To:        soc-status@freebsd.org
Subject:   Kernel Level File Integrity Checker report #4
Message-ID:  <CAHywV0i4z%2Bnb6seHKaALK7acApXMUoFR3bN9ySPL4XyZxGDsHQ@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
During week #4:

* pefs_mount() can be supplied the "-o checksum" option, which enables
integrity checking in pefs kernel driver.
If this option is found during VFS_MOUNT(), our driver acquires a vnode for
the .pefs.checksum file and loads its header as well as the index part of
.pefs.checksum which is kept in kernel heap.
Resources are deallocated and checksum vnode vreled during pefs_unmount()
(VFS_UNMOUNT()).

* When a new pefs vnode is generated as a result of a VOP_LOOKUP() call, we
look it up in our checksum index tables. If an entry for our file is found,
we keep a pointer to that entry with the pefs vnode.
This reference will be later used e.g. during a VOP_READ() call where we
will test the checksum of the block that was retrieved from disk against
the checksum from .pefs.checksum.

-- 

Efstratios "GPF" Karatzas



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAHywV0i4z%2Bnb6seHKaALK7acApXMUoFR3bN9ySPL4XyZxGDsHQ>