linux-kernel - Re: [PATCH 1/3] ide: add "ignore

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 26 May 2009 01:06:12 +0200
From:	Frans Pop <elendil@...net.nl>
To:	Alan Cox <alan@...rguk.ukuu.org.uk>
Cc:	Bartlomiej Zolnierkiewicz <bzolnier@...il.com>,
	linux-ide@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re: [PATCH 1/3] ide: add "ignore_hpa" module parameter

On Tuesday 26 May 2009, Alan Cox wrote:
> > It's also not obvious (at least not to a dumb user like me) that
> > "ignore HPA limit" is equivalent to "preserving the Host Protected
> > Area" as the commit commit says.
>
> It isn't - its the exact reverse.

Right.

> Ignoring the HPA limit tells the kernel to ignore the system BIOS and
> firmware set defaults and to stomp the whole disk regardless. On a
> modern system thats almost always a really bad idea. Unfortunately on
> ancient boxes with disk jumpers set to lie about the disk size (32GB
> clipping etc) its the right thing.
>
> Having the same parameter in both stacks seems a good idea but really
> we need Tejun's patch exposing the values and then to propogate the hpa
> ignore into sysfs and trigger a revalidate of the disk if you change
> it. Libata has all the framework for that ready just needing the final
> bits. I don't see anything problematic in old IDE also having that
> interface.

That also sounds as if it would better protect (or at least inform) 
existing users who have file systems on disks where the HPA is currently 
being ignored.

Seems to me this whole issue would also be worth an LWN (BCCed) article to 
raise awareness, explain the issue, maybe give practical info how to test 
whether you're affected, and maybe add some advice to distributions how 
to handle it. Seems to me like it's something that should be mentioned in 
distribution release notes.

Cheers,
FJP
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/