From owner-freebsd-fs@FreeBSD.ORG Wed Jul 29 09:20:02 2009 Return-Path: Delivered-To: freebsd-fs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B8C3D1065672 for ; Wed, 29 Jul 2009 09:20:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 88DC58FC14 for ; Wed, 29 Jul 2009 09:20:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n6T9K2o7025797 for ; Wed, 29 Jul 2009 09:20:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n6T9K2TZ025796; Wed, 29 Jul 2009 09:20:02 GMT (envelope-from gnats) Date: Wed, 29 Jul 2009 09:20:02 GMT Message-Id: <200907290920.n6T9K2TZ025796@freefall.freebsd.org> To: freebsd-fs@FreeBSD.org From: Marc Olzheim Cc: Subject: Re: kern/127213: [tmpfs] sendfile on tmpfs data corruption X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Marc Olzheim List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jul 2009 09:20:03 -0000 The following reply was made to PR kern/127213; it has been noted by GNATS. From: Marc Olzheim To: bug-followup@FreeBSD.org Cc: Subject: Re: kern/127213: [tmpfs] sendfile on tmpfs data corruption Date: Wed, 29 Jul 2009 10:51:40 +0200 This is not just a bug, but a security hole. What you are seeing is the content of other VM pages. This has exactly the same symptoms as http://security.freebsd.org/advisories/FreeBSD-SA-05:02.sendfile.asc In short: do not use tmpfs unless you trust all users on the system with root access.