linux-ext4 - Re: [Resubmit][PATCH 5/5] Secure Deletion and Trash-Bin Support for Ext4

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <1170362491.4271.31.camel@localhost.localdomain>
Date:	Thu, 01 Feb 2007 12:41:31 -0800
From:	Mingming Cao <cmm@...ibm.com>
To:	Dave Kleikamp <shaggy@...ux.vnet.ibm.com>
Cc:	Nikolai Joukov <kolya@...sunysb.edu>,
	Harry Papaxenopoulos <harry@...sunysb.edu>,
	linux-ext4@...r.kernel.org, ezk@...sunysb.edu
Subject: Re: [Resubmit][PATCH 5/5] Secure Deletion and Trash-Bin Support
	for Ext4

On Thu, 2007-02-01 at 19:32 +0000, Dave Kleikamp wrote:
> On Thu, 2007-02-01 at 12:17 -0500, Nikolai Joukov wrote:
> 
> > > I don't have a strong opinion for or against the function and your
> > > design.  The only potential problem I see in the approach is that
> > > the .trash directory may conflict with some other use of the same name.
> > > Since this is primarily vfs function, you'll probably get a wider
> > > audience on linux-fsdevel.
> > 
> > Well, I guess lost+found has the same problem but it is not a problem at
> > all to pick some other (longer) name.
> 
> Right, I didn't see it as a show-stopper, just something to consider.
> > 
> > > Have you considered putting ALL of the function in the vfs layer?  It
> > > looks like this could be done without touching any code in the
> > > individual file systems.
> > 
> > Unfortunately, we need some file system-specific code to access per-file
> > secure deletion and per-file trash bit attributes.  These attributes are
> > supported only by some file systems and in different ways.  
> 

The check for fs specific attributes has to be underlying fs code.  But
the code the handling the secure delete and trash bin (although now is
only two functions being called) are identical for all fs, could be move
to VFS layer.

> Yeah, I did see that.  I wonder adding some inode or file operation just
> to query the existence of those attributes (or something more generic)
> would be too ugly.
> 

I gave a brief thought on that yesterday, it was not very pretty:)


Thanks,
Mingming


-
To unsubscribe from this list: send the line "unsubscribe linux-ext4" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html