Date: Wed, 6 Oct 1999 23:19:53 -0700 (PDT) From: Julian Elischer <julian@whistle.com> To: Alban Hertroys <dalroi@wit401310.student.utwente.nl> Cc: wsanchez@apple.com, Pat Dirks <pwd@apple.com>, FreeBSD Hackers <FreeBSD-Hackers@FreeBSD.ORG> Subject: Re: Apple's planned appoach to permissions on movable filesystems Message-ID: <Pine.BSF.4.05.9910062318070.51027-100000@home.elischer.org> In-Reply-To: <19991007060251.6D1A71DD0@wit401310.student.utwente.nl>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 7 Oct 1999, Alban Hertroys wrote: > On 6 Oct, Wilfredo Sanchez wrote: > > | I would rather brand the filesystem with the ID of the host. The > > | starting situation is an "unmarked" filesystem. If a host detects the > > | mounting of an "unmarked" filesystem, it will brand it with it's ID. If > > | it detects a filesystem that has an ID that differs from the host's ID, > > | it is a foreign filesystem. Seems quite simple to me... > > > > But then you have to put that information on the disk, and you're > > back to trusting the disk. "Um, yeah, I'm local. Trust me." > > Hmmm... But you can also fake the filesystem ID to be one that was > previously known by the system. Just make the filesystem local, put > some horrible executables on it, and write back the original idea (if > that's at all necessary, I'm still not sure it gets changed in between). > > The problem is that you write a "unique" ID on the disk. You can read > the disk, so you can store that ID and write it back if you do want to > harm somebody. Is public key encryption, or something like that, a > solution? Or is this not necessary? you could hash the superblocks and private key encrypt the hash. it still doesn't guarantee that the data hasn't been replaced 'in place'. for that you'd have to has the entire disk.... > > My .001 cts. > > -- > Alban Hertroys. > http://wit401310.student.utwente.nl > --- > If I had a sig it would be fun. > The quest for the Holy Sig has begun. > I have not yet a clue, > What will you see next issue? > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-hackers" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9910062318070.51027-100000>