Project

General

Profile

Actions

Bug #9612

closed

Run fsck with -z for ufs on upgrade to address FreeBSD-SA-19:10.ufs

Added by Jim Pingle over 2 years ago. Updated over 1 year ago.

Status:
Resolved
Priority:
High
Category:
Operating System
Target version:
Start date:
07/03/2019
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:
All

Description

Full details at https://www.freebsd.org/security/advisories/FreeBSD-SA-19:10.ufs.asc but long story short, on UFS filesystems uninitialized directory padding may contain a few bytes of content from kernel memory readable by anyone who can access a directory.

To clean it up, at boot time before mounting root, this must be run:

fsck -t ufs -f -p -T ufs:-z

We already have code to run fsck then, but we need to trigger this special run just once for everyone unconditionally on upgrade to a release containing the fix.

Actions #1

Updated by Renato Botelho about 2 years ago

  • Assignee set to Renato Botelho
Actions #2

Updated by Renato Botelho about 2 years ago

  • Status changed from New to Feedback
  • % Done changed from 0 to 100
Actions #3

Updated by Jim Pingle about 2 years ago

  • Target version changed from 2.5.0 to 2.4.5
Actions #4

Updated by Jim Pingle almost 2 years ago

  • Status changed from Feedback to New

This fix does not appear to be getting triggered. There is no sign of the expected messages during the upgrade process.

Actions #5

Updated by Renato Botelho almost 2 years ago

  • Status changed from New to Feedback
Actions #6

Updated by Jim Pingle almost 2 years ago

  • Status changed from Feedback to Resolved

Looks good on 2.4.5 and 2.5.0 now. I see the message when the rc package is upgraded, and the expected messages and fsck output during the upgrade process. The expected files are present afterward showing that the fix was applied.

Actions #7

Updated by Jim Pingle over 1 year ago

  • Private changed from Yes to No
Actions

Also available in: Atom PDF