linux-kernel - Re: [PATCH] x86, efi: add no_bricked

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 22 Nov 2013 15:23:57 +0900
From:	Yasuaki Ishimatsu <isimatu.yasuaki@...fujitsu.com>
To:	Matthew Garrett <matthew.garrett@...ula.com>
CC:	"linux-efi@...r.kernel.org" <linux-efi@...r.kernel.org>,
	"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
	"matt.fleming@...el.com" <matt.fleming@...el.com>,
	"jlee@...e.com" <jlee@...e.com>,
	"matt@...sole-pimps.org" <matt@...sole-pimps.org>,
	"richard@....at" <richard@....at>,
	"cxie@...hat.com" <cxie@...hat.com>
Subject: Re: [PATCH] x86, efi: add no_bricked_efi whitelist

(2013/11/22 9:03), Matthew Garrett wrote:
> On Fri, 2013-11-22 at 09:00 +0900, Yasuaki Ishimatsu wrote:
>> (2013/11/22 5:12), Matthew Garrett wrote:
>>> On Thu, 2013-11-21 at 18:35 +0900, Yasuaki Ishimatsu wrote:
>>>
>>>> Remaining space is free space that can be used by efi variable. But by 5KB
>>>> threshold, we cannot use the space while running OS.
>>>
>>> Is the situation something like(assuming a 128KB flash part):
>>>
>>> 1) 64KB of variables, 59KB of deleted variables, 5KB of free space,
>>
>> My situation looks like this. The free space spreads out if gc runs.
>
> Ok. In that case Joey's suggestion that we try forcing a GC run in the
> boot stub if free space < (threshold * 2) might be the best plan.
>
 > 2) 123KB of variables, 5KB of free space

I don't know how to implement your idea. But if GC run by your idea, the free
space may spread out. So 1) case is solved. But it does not solve 2) case.
In my opinion, if system has sane firmware, all nvram strage should be used.
I will send whiltelist version which used DMI infomation. Please review it.

Thanks,
Yasuaki Ishimatsu



--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/