From owner-freebsd-security@freebsd.org  Wed Jul  3 15:00:21 2019
Return-Path: <owner-freebsd-security@freebsd.org>
Delivered-To: freebsd-security@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4991915D67D1
 for <freebsd-security@mailman.ysv.freebsd.org>;
 Wed,  3 Jul 2019 15:00:21 +0000 (UTC) (envelope-from mike@sentex.net)
Received: from pyroxene.sentex.ca (unknown [IPv6:2607:f3e0:0:3::18])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "pyroxene.sentex.ca",
 Issuer "Let's Encrypt Authority X3" (not verified))
 by mx1.freebsd.org (Postfix) with ESMTPS id 59014772B0
 for <freebsd-security@freebsd.org>; Wed,  3 Jul 2019 15:00:20 +0000 (UTC)
 (envelope-from mike@sentex.net)
Received: from [192.168.43.29] ([192.168.43.29])
 by pyroxene.sentex.ca (8.15.2/8.15.2) with ESMTPS id x63F0IHH054172
 (version=TLSv1.2 cipher=AES128-SHA bits=128 verify=NO)
 for <freebsd-security@freebsd.org>; Wed, 3 Jul 2019 11:00:19 -0400 (EDT)
 (envelope-from mike@sentex.net)
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-19:10.ufs
To: freebsd-security@freebsd.org
References: <20190703004924.8A5411A7D5@freefall.freebsd.org>
From: mike tancsa <mike@sentex.net>
Message-ID: <64088617-ef63-d1b7-06a0-7f73d685769e@sentex.net>
Date: Wed, 3 Jul 2019 11:00:19 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101
 Thunderbird/60.7.2
MIME-Version: 1.0
In-Reply-To: <20190703004924.8A5411A7D5@freefall.freebsd.org>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Content-Language: en-US
X-Rspamd-Queue-Id: 59014772B0
X-Spamd-Bar: +
Authentication-Results: mx1.freebsd.org;
 spf=pass (mx1.freebsd.org: domain of mike@sentex.net designates
 2607:f3e0:0:3::18 as permitted sender) smtp.mailfrom=mike@sentex.net
X-Spamd-Result: default: False [1.65 / 15.00]; ARC_NA(0.00)[];
 RDNS_NONE(1.00)[]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[];
 R_SPF_ALLOW(-0.20)[+ip6:2607:f3e0::/32];
 TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain];
 PREVIOUSLY_DELIVERED(0.00)[freebsd-security@freebsd.org];
 TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1];
 NEURAL_HAM_LONG(-0.48)[-0.479,0]; DMARC_NA(0.00)[sentex.net];
 NEURAL_SPAM_SHORT(0.21)[0.211,0];
 MX_GOOD(-0.01)[cached: smtp.sentex.ca];
 NEURAL_HAM_MEDIUM(-0.82)[-0.819,0];
 IP_SCORE(-0.45)[ipnet: 2000::/3(-1.47), asn: 12874(-0.83), country: IT(0.03)]; 
 FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[];
 MIME_TRACE(0.00)[0:+];
 ASN(0.00)[asn:12874, ipnet:2000::/3, country:IT];
 HFILTER_HOSTNAME_UNKNOWN(2.50)[]; MID_RHS_MATCH_FROM(0.00)[];
 RCVD_COUNT_TWO(0.00)[2]
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Jul 2019 15:00:21 -0000

On 7/2/2019 8:49 PM, FreeBSD Security Advisories wrote:
> Special note: This update also adds the -z flag to fsck_ffs to have it scrub
> the leaked information in the name padding of existing directories.  It only
> needs to be run once on each UFS/FFS filesystem after a patched kernel is
> installed and running.
>
> # freebsd-update install
>
> Afterwards, reboot the system and run:
>
> # fsck -t ufs -f -p -T ufs:-z
>
> to clean up your existing filesystems.
>
Doesnt this need to be run in single user mode with the file system not
mounted RW ?

    ---Mike