FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Ubuntu > Ubuntu Kernel Team

 
 
LinkBack Thread Tools
 
Old 01-20-2010, 12:28 PM
Surbhi Palande
 
Default ext3 defaults to ordered mode

BugLink: http://bugs.launchpad.net/bugs/510067

To prevent a security threat of older data being inadvertently exposed,
the default mount option of ext3 should be ordered instead of writeback. This
patch changes the default compile time option for ext3 to reflect the same in
the default mount time option.

Signed-off-by: Surbhi Palande <surbhi.palande@canonical.com>
---
debian.master/config/config.common.ports | 2 +-
debian.master/config/config.common.ubuntu | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/debian.master/config/config.common.ports b/debian.master/config/config.common.ports
index 39ee289..4e22aeb 100644
--- a/debian.master/config/config.common.ports
+++ b/debian.master/config/config.common.ports
@@ -817,7 +817,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
CONFIG_EXT2_FS_SECURITY=y
CONFIG_EXT2_FS_XATTR=y
# CONFIG_EXT2_FS_XIP is not set
-# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
+CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
CONFIG_EXT3_FS=y
CONFIG_EXT3_FS_POSIX_ACL=y
CONFIG_EXT3_FS_SECURITY=y
diff --git a/debian.master/config/config.common.ubuntu b/debian.master/config/config.common.ubuntu
index 462c1c1..2477234 100644
--- a/debian.master/config/config.common.ubuntu
+++ b/debian.master/config/config.common.ubuntu
@@ -943,7 +943,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
CONFIG_EXT2_FS_SECURITY=y
CONFIG_EXT2_FS_XATTR=y
# CONFIG_EXT2_FS_XIP is not set
-# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
+CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
CONFIG_EXT3_FS=y
CONFIG_EXT3_FS_POSIX_ACL=y
CONFIG_EXT3_FS_SECURITY=y
--
1.6.3.3


--
kernel-team mailing list
kernel-team@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/kernel-team
 
Old 01-20-2010, 12:28 PM
Surbhi Palande
 
Default ext3 defaults to ordered mode

BugLink: http://bugs.launchpad.net/bugs/510067
Ignore: yes

To prevent a security threat of older data being inadvertently exposed,
the default mount option of ext3 should be ordered instead of writeback. This
patch enables the compile time option CONFIG_EXT3_DEFAULTS_TO_ORDERED
to ensure the data=ordered mode for an ext3 fs mount.

Signed-off-by: Surbhi Palande <surbhi.palande@canonical.com>
---
debian.master/config/config.common.ports | 2 +-
debian.master/config/config.common.ubuntu | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/debian.master/config/config.common.ports b/debian.master/config/config.common.ports
index 39ee289..4e22aeb 100644
--- a/debian.master/config/config.common.ports
+++ b/debian.master/config/config.common.ports
@@ -817,7 +817,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
CONFIG_EXT2_FS_SECURITY=y
CONFIG_EXT2_FS_XATTR=y
# CONFIG_EXT2_FS_XIP is not set
-# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
+CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
CONFIG_EXT3_FS=y
CONFIG_EXT3_FS_POSIX_ACL=y
CONFIG_EXT3_FS_SECURITY=y
diff --git a/debian.master/config/config.common.ubuntu b/debian.master/config/config.common.ubuntu
index 462c1c1..2477234 100644
--- a/debian.master/config/config.common.ubuntu
+++ b/debian.master/config/config.common.ubuntu
@@ -943,7 +943,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
CONFIG_EXT2_FS_SECURITY=y
CONFIG_EXT2_FS_XATTR=y
# CONFIG_EXT2_FS_XIP is not set
-# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
+CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
CONFIG_EXT3_FS=y
CONFIG_EXT3_FS_POSIX_ACL=y
CONFIG_EXT3_FS_SECURITY=y
--
1.6.3.3

--
kernel-team mailing list
kernel-team@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/kernel-team
 
Old 01-20-2010, 05:21 PM
Surbhi Palande
 
Default ext3 defaults to ordered mode

This patch fixes bug 510067 on launchpad.
It changes the default compile time option for ext3 from "writeback" to "ordered",
so as to mount the ext3 fs with the "data=ordered" option by default. This change
prevents a potential security threat of older data being exposed accidentally under
"data=writeback" mode.

Do consider merging this for Karmic.

The following changes since commit de24f70e1584c4a9db5518fb3b8ddfa02715655e:
Torgny Johansson (1):
cdc_ether: additional Ericsson MBM PID's to the whitelist

are available in the git repository at:

git://kernel.ubuntu.com/surbhi/ubuntu-karmic.git lp510067

Surbhi Palande (1):
UBUNTU: [SAUCE] ext3 defaults to ordered mode

debian.master/config/config.common.ports | 2 +-
debian.master/config/config.common.ubuntu | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
 
Old 01-20-2010, 06:20 PM
 
Default ext3 defaults to ordered mode

I think you need to use the config template.

On Wed, 20 Jan 2010, Surbhi Palande wrote:

> This patch fixes bug 510067 on launchpad.
> It changes the default compile time option for ext3 from "writeback" to "ordered",
> so as to mount the ext3 fs with the "data=ordered" option by default. This change
> prevents a potential security threat of older data being exposed accidentally under
> "data=writeback" mode.
>
> Do consider merging this for Karmic.
>
> The following changes since commit de24f70e1584c4a9db5518fb3b8ddfa02715655e:
> Torgny Johansson (1):
> cdc_ether: additional Ericsson MBM PID's to the whitelist
>
> are available in the git repository at:
>
> git://kernel.ubuntu.com/surbhi/ubuntu-karmic.git lp510067
>
> Surbhi Palande (1):
> UBUNTU: [SAUCE] ext3 defaults to ordered mode
>
> debian.master/config/config.common.ports | 2 +-
> debian.master/config/config.common.ubuntu | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
>
> From 8d22adc6cabf4963da66c99e679588b174f97459 Mon Sep 17 00:00:00 2001
> From: Surbhi Palande <surbhi.palande@canonical.com>
> Date: Wed, 20 Jan 2010 15:28:31 +0200
> Subject: [PATCH] UBUNTU: [SAUCE] ext3 defaults to ordered mode
>
> BugLink: http://bugs.launchpad.net/bugs/510067
>
> To prevent a security threat of older data being inadvertently exposed,
> the default mount option of ext3 should be ordered instead of writeback. This
> patch changes the default compile time option for ext3 to reflect the same in
> the default mount time option.
>
> Signed-off-by: Surbhi Palande <surbhi.palande@canonical.com>
> ---
> debian.master/config/config.common.ports | 2 +-
> debian.master/config/config.common.ubuntu | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/debian.master/config/config.common.ports b/debian.master/config/config.common.ports
> index 39ee289..4e22aeb 100644
> --- a/debian.master/config/config.common.ports
> +++ b/debian.master/config/config.common.ports
> @@ -817,7 +817,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
> CONFIG_EXT2_FS_SECURITY=y
> CONFIG_EXT2_FS_XATTR=y
> # CONFIG_EXT2_FS_XIP is not set
> -# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
> +CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
> CONFIG_EXT3_FS=y
> CONFIG_EXT3_FS_POSIX_ACL=y
> CONFIG_EXT3_FS_SECURITY=y
> diff --git a/debian.master/config/config.common.ubuntu b/debian.master/config/config.common.ubuntu
> index 462c1c1..2477234 100644
> --- a/debian.master/config/config.common.ubuntu
> +++ b/debian.master/config/config.common.ubuntu
> @@ -943,7 +943,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
> CONFIG_EXT2_FS_SECURITY=y
> CONFIG_EXT2_FS_XATTR=y
> # CONFIG_EXT2_FS_XIP is not set
> -# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
> +CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
> CONFIG_EXT3_FS=y
> CONFIG_EXT3_FS_POSIX_ACL=y
> CONFIG_EXT3_FS_SECURITY=y
> --
> 1.6.3.3
>
>
> --
> kernel-team mailing list
> kernel-team@lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team
>

--
kernel-team mailing list
kernel-team@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/kernel-team
 
Old 01-21-2010, 09:34 AM
Surbhi Palande
 
Default ext3 defaults to ordered mode

This patch fixes bug 510067 on launchpad.
This patch enables the compile time option CONFIG_EXT3_DEFAULTS_TO_ORDERED
to ensure the data=ordered mode for an ext3 fs mount. This prevents a security
threat of older data being inadvertently exposed, that arises from mounting the
ext3 fs with the data=writeback mode.

Do consider merging this for Karmic.
 
Old 01-21-2010, 09:44 AM
Surbhi Palande
 
Default ext3 defaults to ordered mode

BugLink: http://bugs.launchpad.net/bugs/510067
Ignore: yes

To prevent a security threat of older data being inadvertently exposed, the
default mount option of ext3 should be ordered instead of writeback. This
patch enables the compile time option CONFIG_EXT3_DEFAULTS_TO_ORDERED to
ensure that an ext3 fs mounts with the data=ordered mode.

Signed-off-by: Surbhi Palande <surbhi.palande@canonical.com>
---
debian.master/config/config.common.ports | 2 +-
debian.master/config/config.common.ubuntu | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/debian.master/config/config.common.ports b/debian.master/config/config.common.ports
index b2a78e1..cba6343 100644
--- a/debian.master/config/config.common.ports
+++ b/debian.master/config/config.common.ports
@@ -859,7 +859,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
CONFIG_EXT2_FS_SECURITY=y
CONFIG_EXT2_FS_XATTR=y
# CONFIG_EXT2_FS_XIP is not set
-# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
+CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
CONFIG_EXT3_FS=y
CONFIG_EXT3_FS_POSIX_ACL=y
CONFIG_EXT3_FS_SECURITY=y
diff --git a/debian.master/config/config.common.ubuntu b/debian.master/config/config.common.ubuntu
index ea1eac7..b800972 100644
--- a/debian.master/config/config.common.ubuntu
+++ b/debian.master/config/config.common.ubuntu
@@ -1042,7 +1042,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
CONFIG_EXT2_FS_SECURITY=y
CONFIG_EXT2_FS_XATTR=y
# CONFIG_EXT2_FS_XIP is not set
-# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
+CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
CONFIG_EXT3_FS=y
CONFIG_EXT3_FS_POSIX_ACL=y
CONFIG_EXT3_FS_SECURITY=y
--
1.6.3.3


--
kernel-team mailing list
kernel-team@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/kernel-team
 
Old 01-21-2010, 10:05 AM
Surbhi Palande
 
Default ext3 defaults to ordered mode

This patch fixes bug 510067 on launchpad.
This patch enables the compile time option CONFIG_EXT3_DEFAULTS_TO_ORDERED
to ensure the data=ordered mode for an ext3 fs mount. This prevents a security
threat of older data being inadvertently exposed, that arises from mounting the
ext3 fs with the data=writeback mode.

Do consider merging this for Lucid.
 
Old 01-21-2010, 12:20 PM
Tim Gardner
 
Default ext3 defaults to ordered mode

Surbhi Palande wrote:
> This patch fixes bug 510067 on launchpad.
> This patch enables the compile time option CONFIG_EXT3_DEFAULTS_TO_ORDERED
> to ensure the data=ordered mode for an ext3 fs mount. This prevents a security
> threat of older data being inadvertently exposed, that arises from mounting the
> ext3 fs with the data=writeback mode.
>
> Do consider merging this for Karmic.
>
>
> From 6978a248df3aab38476659e164020b35f7b227ad Mon Sep 17 00:00:00 2001
> From: Surbhi Palande <surbhi.palande@canonical.com>
> Date: Wed, 20 Jan 2010 15:28:31 +0200
> Subject: [PATCH] UBUNTU: [Config] ext3 defaults to ordered mode
>
> BugLink: http://bugs.launchpad.net/bugs/510067
> Ignore: yes
>
> To prevent a security threat of older data being inadvertently exposed,
> the default mount option of ext3 should be ordered instead of writeback. This
> patch enables the compile time option CONFIG_EXT3_DEFAULTS_TO_ORDERED
> to ensure the data=ordered mode for an ext3 fs mount.
>
> Signed-off-by: Surbhi Palande <surbhi.palande@canonical.com>
> ---
> debian.master/config/config.common.ports | 2 +-
> debian.master/config/config.common.ubuntu | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/debian.master/config/config.common.ports b/debian.master/config/config.common.ports
> index 39ee289..4e22aeb 100644
> --- a/debian.master/config/config.common.ports
> +++ b/debian.master/config/config.common.ports
> @@ -817,7 +817,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
> CONFIG_EXT2_FS_SECURITY=y
> CONFIG_EXT2_FS_XATTR=y
> # CONFIG_EXT2_FS_XIP is not set
> -# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
> +CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
> CONFIG_EXT3_FS=y
> CONFIG_EXT3_FS_POSIX_ACL=y
> CONFIG_EXT3_FS_SECURITY=y
> diff --git a/debian.master/config/config.common.ubuntu b/debian.master/config/config.common.ubuntu
> index 462c1c1..2477234 100644
> --- a/debian.master/config/config.common.ubuntu
> +++ b/debian.master/config/config.common.ubuntu
> @@ -943,7 +943,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
> CONFIG_EXT2_FS_SECURITY=y
> CONFIG_EXT2_FS_XATTR=y
> # CONFIG_EXT2_FS_XIP is not set
> -# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
> +CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
> CONFIG_EXT3_FS=y
> CONFIG_EXT3_FS_POSIX_ACL=y
> CONFIG_EXT3_FS_SECURITY=y

Since we're already thinking about performance degradation with ext4, is
this going to have an adverse impact on ext3 performance? It seems to me
that the vulnerability window that this closes is vanishingly small, and
really only applies to multi-user machines (I think). After all, who
cares if the vulnerability exists on your laptop? You're likely the only
user anyway.

rtg
--
Tim Gardner tim.gardner@canonical.com

--
kernel-team mailing list
kernel-team@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/kernel-team
 
Old 01-21-2010, 12:35 PM
Stefan Bader
 
Default ext3 defaults to ordered mode

Tim Gardner wrote:
> Surbhi Palande wrote:
>> This patch fixes bug 510067 on launchpad.
>> This patch enables the compile time option CONFIG_EXT3_DEFAULTS_TO_ORDERED
>> to ensure the data=ordered mode for an ext3 fs mount. This prevents a security
>> threat of older data being inadvertently exposed, that arises from mounting the
>> ext3 fs with the data=writeback mode.
>>
>> Do consider merging this for Karmic.
>>
>>
>> From 6978a248df3aab38476659e164020b35f7b227ad Mon Sep 17 00:00:00 2001
>> From: Surbhi Palande <surbhi.palande@canonical.com>
>> Date: Wed, 20 Jan 2010 15:28:31 +0200
>> Subject: [PATCH] UBUNTU: [Config] ext3 defaults to ordered mode
>>
>> BugLink: http://bugs.launchpad.net/bugs/510067
>> Ignore: yes
>>
>> To prevent a security threat of older data being inadvertently exposed,
>> the default mount option of ext3 should be ordered instead of writeback. This
>> patch enables the compile time option CONFIG_EXT3_DEFAULTS_TO_ORDERED
>> to ensure the data=ordered mode for an ext3 fs mount.
>>
>> Signed-off-by: Surbhi Palande <surbhi.palande@canonical.com>
>> ---
>> debian.master/config/config.common.ports | 2 +-
>> debian.master/config/config.common.ubuntu | 2 +-
>> 2 files changed, 2 insertions(+), 2 deletions(-)
>>
>> diff --git a/debian.master/config/config.common.ports b/debian.master/config/config.common.ports
>> index 39ee289..4e22aeb 100644
>> --- a/debian.master/config/config.common.ports
>> +++ b/debian.master/config/config.common.ports
>> @@ -817,7 +817,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
>> CONFIG_EXT2_FS_SECURITY=y
>> CONFIG_EXT2_FS_XATTR=y
>> # CONFIG_EXT2_FS_XIP is not set
>> -# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
>> +CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
>> CONFIG_EXT3_FS=y
>> CONFIG_EXT3_FS_POSIX_ACL=y
>> CONFIG_EXT3_FS_SECURITY=y
>> diff --git a/debian.master/config/config.common.ubuntu b/debian.master/config/config.common.ubuntu
>> index 462c1c1..2477234 100644
>> --- a/debian.master/config/config.common.ubuntu
>> +++ b/debian.master/config/config.common.ubuntu
>> @@ -943,7 +943,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
>> CONFIG_EXT2_FS_SECURITY=y
>> CONFIG_EXT2_FS_XATTR=y
>> # CONFIG_EXT2_FS_XIP is not set
>> -# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
>> +CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
>> CONFIG_EXT3_FS=y
>> CONFIG_EXT3_FS_POSIX_ACL=y
>> CONFIG_EXT3_FS_SECURITY=y
>
> Since we're already thinking about performance degradation with ext4, is
> this going to have an adverse impact on ext3 performance? It seems to me
> that the vulnerability window that this closes is vanishingly small, and
> really only applies to multi-user machines (I think). After all, who
> cares if the vulnerability exists on your laptop? You're likely the only
> user anyway.
>
> rtg

It will have an impact. But it not only has the security side but also the data
consistency side to it. There seems to be an overall bigger tendency to think of
the ordered option as being the preferable. The initial trigger to look at this
was a report of a fs corruption after a crash. Plus it was our default before
the config option was introduced. And we just failed to notice they silently
change the default there.

-Stefan

--
kernel-team mailing list
kernel-team@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/kernel-team
 
Old 01-21-2010, 12:38 PM
Stefan Bader
 
Default ext3 defaults to ordered mode

This restores our original default, prevents some cases of corruption after
crashes and Kees wants it, too.

Surbhi Palande wrote:
> This patch fixes bug 510067 on launchpad.
> This patch enables the compile time option CONFIG_EXT3_DEFAULTS_TO_ORDERED
> to ensure the data=ordered mode for an ext3 fs mount. This prevents a security
> threat of older data being inadvertently exposed, that arises from mounting the
> ext3 fs with the data=writeback mode.
>
> Do consider merging this for Karmic.
>
>
> From 6978a248df3aab38476659e164020b35f7b227ad Mon Sep 17 00:00:00 2001
> From: Surbhi Palande <surbhi.palande@canonical.com>
> Date: Wed, 20 Jan 2010 15:28:31 +0200
> Subject: [PATCH] UBUNTU: [Config] ext3 defaults to ordered mode
>
> BugLink: http://bugs.launchpad.net/bugs/510067
> Ignore: yes
>
> To prevent a security threat of older data being inadvertently exposed,
> the default mount option of ext3 should be ordered instead of writeback. This
> patch enables the compile time option CONFIG_EXT3_DEFAULTS_TO_ORDERED
> to ensure the data=ordered mode for an ext3 fs mount.
>
> Signed-off-by: Surbhi Palande <surbhi.palande@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>

> ---
> debian.master/config/config.common.ports | 2 +-
> debian.master/config/config.common.ubuntu | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/debian.master/config/config.common.ports b/debian.master/config/config.common.ports
> index 39ee289..4e22aeb 100644
> --- a/debian.master/config/config.common.ports
> +++ b/debian.master/config/config.common.ports
> @@ -817,7 +817,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
> CONFIG_EXT2_FS_SECURITY=y
> CONFIG_EXT2_FS_XATTR=y
> # CONFIG_EXT2_FS_XIP is not set
> -# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
> +CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
> CONFIG_EXT3_FS=y
> CONFIG_EXT3_FS_POSIX_ACL=y
> CONFIG_EXT3_FS_SECURITY=y
> diff --git a/debian.master/config/config.common.ubuntu b/debian.master/config/config.common.ubuntu
> index 462c1c1..2477234 100644
> --- a/debian.master/config/config.common.ubuntu
> +++ b/debian.master/config/config.common.ubuntu
> @@ -943,7 +943,7 @@ CONFIG_EXT2_FS_POSIX_ACL=y
> CONFIG_EXT2_FS_SECURITY=y
> CONFIG_EXT2_FS_XATTR=y
> # CONFIG_EXT2_FS_XIP is not set
> -# CONFIG_EXT3_DEFAULTS_TO_ORDERED is not set
> +CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
> CONFIG_EXT3_FS=y
> CONFIG_EXT3_FS_POSIX_ACL=y
> CONFIG_EXT3_FS_SECURITY=y


--
kernel-team mailing list
kernel-team@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/kernel-team
 

Thread Tools




All times are GMT. The time now is 10:14 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org