linux-kernel - Re: [PATCH] x86, efi: add no_bricked

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 22 Nov 2013 17:48:34 +0000
From:	Matthew Garrett <matthew.garrett@...ula.com>
To:	"isimatu.yasuaki@...fujitsu.com" <isimatu.yasuaki@...fujitsu.com>
CC:	"linux-efi@...r.kernel.org" <linux-efi@...r.kernel.org>,
	"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
	"matt.fleming@...el.com" <matt.fleming@...el.com>,
	"jlee@...e.com" <jlee@...e.com>,
	"matt@...sole-pimps.org" <matt@...sole-pimps.org>,
	"richard@....at" <richard@....at>,
	"cxie@...hat.com" <cxie@...hat.com>
Subject: Re: [PATCH] x86, efi: add no_bricked_efi whitelist

On Fri, 2013-11-22 at 15:23 +0900, Yasuaki Ishimatsu wrote:

> I don't know how to implement your idea. But if GC run by your idea, the free
> space may spread out. So 1) case is solved. But it does not solve 2) case.
> In my opinion, if system has sane firmware, all nvram strage should be used.
> I will send whiltelist version which used DMI infomation. Please review it.

We don't want to solve (2). The benefit in doing so is small compared to
the cost of maintaining a whitelist or risking breaking systems.

-- 
Matthew Garrett <matthew.garrett@...ula.com>