lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <51023FEA.7000802@reinform.de> Date: Fri, 25 Jan 2013 09:18:50 +0100 From: "Dr. Tilmann Bubeck" <t.bubeck@...nform.de> To: linux-ext4@...r.kernel.org Subject: Use EXT4_BOOT_LOADER_INO for boot loader GRUB? There is a long discussion about booting GRUB2 from a partition containing ext2/3/4 (e.g. https://bugzilla.redhat.com/show_bug.cgi?id=872826 and many more on the net). This is typically a multiboot scenario with a primary boot loader in the MBR loading a second bootloader (here "GRUB2") from a partition. Currently GRUB2 prints an error message when trying to install to a ext2/3/4 filesystem with: "Attempting to install GRUB to a partition instead of the MBR. This is a BAD idea. Embedding is not possible. GRUB can only be installed in this setup by using blocklists. However, blocklists are UNRELIABLE and their use is discouraged." The basic problem is, that GRUB needs a safe place to store (currently 32k) for its boot loader "core.img". That place should be simple to find from the primary boot code ("stage1") and the place should be safe for user intervention. QUESTION: You have reserved a special inode #5 called "EXT4_BOOT_LOADER_INO". Is this inode currently used or supported by kernel or user land? What is the idea of this inode? PROPOSAL: I can think of using that inode to store the file "core.img" of GRUB. That file is used by GRUB to boot and the block list of that file is stored in GRUB when using "--force" to override the above error. ext2/3/4 must make sure, that the block list of that file never changes. I propose an additional EXT4 ioctl to tell ext4, which file to store in EXT4_BOOT_LOADER_INO. Probably there must be more changes to e2fsck and friends. Any ideas? Till -- +-------+-------------------------------------------------------------+ | | dr. tilmann bubeck reinform medien- und | | | informationstechnologie AG | | rein | fon : +49 (711) 7 82 76-52 loeffelstr. 40 | | form | fax : +49 (711) 7 82 76-46 70597 stuttgart / germany | | AG | cell.: +49 (172) 8 84 29 72 fon: +49 (711) 75 86 56-10 | | | email: t.bubeck@...nform.de http://www.reinform.de | | +-------------------------------------------------------------+ | | pflichtangaben nach paragraph 80, AktG: | | | reinform medien- und informationstechnologie AG, stuttgart | | | handelsregister stuttgart, HRB 23001 | | | vorstand: dr. tilmann bubeck (vorsitz) | | | aufsichtsrat: frank stege (vorsitz) | +-------+-------------------------------------------------------------+ -- To unsubscribe from this list: send the line "unsubscribe linux-ext4" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists