lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-Id: <20200624023107.182118-1-gwendal@chromium.org> Date: Tue, 23 Jun 2020 19:31:07 -0700 From: Gwendal Grignou <gwendal@...omium.org> To: sarthakkukreti@...omium.org, tytso@....edu, ebiggers@...gle.com Cc: linux-ext4@...r.kernel.org, Gwendal Grignou <gwendal@...omium.org> Subject: [PATCH] tune2fs: allow remove VERITY Allow verity flag to be removed from the susperblock: Tests: - check the signed file is readable by older kernel after flag is removed. EXT4_VERITY_FL replaces EXT4_EXT_MIGRATE that has been removed in 2009. - when a new kernel is reinstalled, check reenabling verity flag allow signature to be verified (fsverity measure ...). Signed-off-by: Gwendal Grignou <gwendal@...omium.org> --- misc/tune2fs.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/misc/tune2fs.c b/misc/tune2fs.c index 314cc0d0..724b8014 100644 --- a/misc/tune2fs.c +++ b/misc/tune2fs.c @@ -198,7 +198,8 @@ static __u32 clear_ok_features[3] = { EXT4_FEATURE_RO_COMPAT_QUOTA | EXT4_FEATURE_RO_COMPAT_PROJECT | EXT4_FEATURE_RO_COMPAT_METADATA_CSUM | - EXT4_FEATURE_RO_COMPAT_READONLY + EXT4_FEATURE_RO_COMPAT_READONLY | + EXT4_FEATURE_RO_COMPAT_VERITY }; /** -- 2.27.0.111.gc72c7da667-goog
Powered by blists - more mailing lists