linux-kernel - Re: [patch] document flash/RAID dangers

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20090827215056.GA1461@ucw.cz>
Date:	Thu, 27 Aug 2009 23:50:56 +0200
From:	Pavel Machek <pavel@....cz>
To:	Chris Adams <cmadams@...aay.net>
Cc:	Theodore Tso <tytso@....edu>, linux-kernel@...r.kernel.org
Subject: Re: [patch] document flash/RAID dangers

Hi!

> The other thing about this thread is that the only RAID implementation
> that is being discussed here is the MD RAID stack.  There are a lot of
> RAID implementations that have the same issues:
> 
> - motherboard (aka "fake") RAID - In Linux this is typically mapped with
>   device mapper via dmraid; AFAIK there is not a tool to scrub (or even
>   monitor the status of and notify on failure) a Linux DM RAID setup.
> 
> - hardware RAID cards without battery backup - these have the exact same
>   issues because they cannot guarantee all writes complete, nor can they
>   keep track of incomplete writes across power failures
> 
> - hardware RAID cards _with_ battery backup but that don't periodically
>   test the battery and have a way to notify you of battery failure while
>   Linux is running
> 
> The issues being raised here are not specific to extX, MD RAID, or Linux
> at all; they are problems with non-"enterprise-class" RAID setups.
> There's a reason enterprise-class RAID costs a lot more money than the
> card you can pick up at Fry's.
> 
> There's no reason to document the design issues of general RAID
> implementations in the Linux kernel.

Even when we carry one of those misdesigned implementations in-tree?
(Note that fixed implementations do exist -- AIX? -- just add journal).

'I wont't tell you that this pony bites, because many ponies do bite'?

WTF? I thought we had higher moral standard than this.

							Pavel

-- 
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/