linux-kernel - Re: HSM (was Re: [malware-list] TALPA

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20080819163345.196961f9@riellaptop.surriel.com>
Date:	Tue, 19 Aug 2008 16:33:45 -0400
From:	Rik van Riel <riel@...hat.com>
To:	Pavel Machek <pavel@...e.cz>
Cc:	Alan Cox <alan@...rguk.ukuu.org.uk>,
	Eric Paris <eparis@...hat.com>,
	Arjan van de Ven <arjan@...radead.org>,
	Jan Harkes <jaharkes@...cmu.edu>,
	"Press, Jonathan" <Jonathan.Press@...com>, peterz@...radead.org,
	linux-kernel@...r.kernel.org, malware-list@...ts.printk.net,
	hch@...radead.org, andi@...stfloor.org, viro@...IV.linux.org.uk
Subject: Re: HSM (was Re: [malware-list] TALPA - a threat model?  well
 sorta.)

On Tue, 19 Aug 2008 21:20:27 +0200
Pavel Machek <pavel@...e.cz> wrote:

> > If you think FUSE+unionfs is a cleaner solution than one
> > hook in the VFS, I've got a bridge to sell you.
> 
> If you can do it with one clean enough hook, I'll buy that bridge.
> 
> [If you want to do 'list directory before files are there' -- and you
> seem to want to from description above -- fuse seems like a way to
> go.]

For a poor man's HSM, it may be a possibility to simply restore
all the files as sparse files, fetching the content on demand.

The files can be marked as HSM-empty files with some kind of
bit flag or xattr.

Restoring sparse files takes very little time.

This scheme could even work for directories, so you can start
using the filesystem before the whole directory tree has been
restored.

All it needs is block-on-open when the file has a special flag
or xattr set.

-- 
All rights reversed.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/