lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Wed, 16 Jan 2019 16:54:49 +1200 From: Linus Torvalds <torvalds@...ux-foundation.org> To: Dave Chinner <david@...morbit.com> Cc: Dominique Martinet <asmadeus@...ewreck.org>, Jiri Kosina <jikos@...nel.org>, Matthew Wilcox <willy@...radead.org>, Jann Horn <jannh@...gle.com>, Andrew Morton <akpm@...ux-foundation.org>, Greg KH <gregkh@...uxfoundation.org>, Peter Zijlstra <peterz@...radead.org>, Michal Hocko <mhocko@...e.com>, Linux-MM <linux-mm@...ck.org>, kernel list <linux-kernel@...r.kernel.org>, Linux API <linux-api@...r.kernel.org> Subject: Re: [PATCH] mm/mincore: allow for making sys_mincore() privileged On Wed, Jan 16, 2019 at 11:45 AM Dave Chinner <david@...morbit.com> wrote: > > I'm assuming that you can invalidate the page cache reliably by a > means that does not repeated require probing to detect invalidation > has occurred. I've mentioned one method in this discussion > already... Yes. And it was made clear to you that it was a bug in xfs dio and what the right thing to do was. And you ignored that, and claimed it was a feature. Why do you then bother arguing this thing? We absolutely agree that xfs has an information leak. If you don't care, just _say_ so. Don't try to argue against other people who are trying to fix things. We can easily just say "ok, xfs people don't care", and ignore the xfs invalidation issue. That's fine. But don't try to make it a big deal for other filesystems that _don't_ have the bug. I even pointed out how ext4 does the page cache flushing correcrly. You pooh-poohed it. You can't have it both ways. Either you care or you don't. If you don't care (and so far everything you said seems to imply you don't), then why are you even discussing this? Just admit you don't care, and we're done. Linus
Powered by blists - more mailing lists