linux-kernel - [RFC PATCH] dm-csum: A new device mapper target that checks data integrity

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20090521161317.GU1376@blitiri.com.ar>
Date:	Thu, 21 May 2009 13:13:17 -0300
From:	Alberto Bertogli <albertito@...tiri.com.ar>
To:	linux-kernel@...r.kernel.org
Cc:	dm-devel@...hat.com, linux-raid@...r.kernel.org, agk@...hat.com,
	neilb@...e.de
Subject: [RFC PATCH] dm-csum: A new device mapper target that checks data
	integrity

Hi!

I'm writing this device mapper target that stores checksums on writes and
verifies them on reads.

It's not widely tested, but you can run mke2fs on it and do basic file
operations. The to-do list is still large, and most of it can be found within
the code.

To test it, you will need to format the device using the (very rough) attached
tool, and then create the dm device with something like:

	echo 0 $SIZE csum $REALDEVICE 0 | dmsetup create $NAME

I think it can be useful for people who want to detect data corruption and are
either using the block layer directly or a filesystem that doesn't check data
integrity (which are most, if not all, of the popular ones today). Maybe it
could also be used for testing the bio-integrity extensions, although at the
moment it's completely independent and I haven't looked much, but it's on my
to-do list.

It does NOT pretend to be useful for consistency checks for security purposes.
Use something else if you do not want someone evil tampering with your data.

Comments are obviously welcome. There are also some questions embedded in the
code, if anyone cares to answer any of them, I'd really appreciate it.

Thanks a lot,
		Alberto

View attachment "dm-csum-1.patch" of type "text/x-diff" (34410 bytes)

View attachment "mk-dm-csum.c" of type "text/x-csrc" (2670 bytes)