Project

General

Profile

Actions
Copy link

Bug #9612

closed
JP RB

Run fsck with -z for ufs on upgrade to address FreeBSD-SA-19:10.ufs

Bug #9612: Run fsck with -z for ufs on upgrade to address FreeBSD-SA-19:10.ufs

Added by Jim Pingle about 7 years ago. Updated over 6 years ago.

Status:
Resolved
Priority:
High
Assignee:
Renato Botelho
Category:
Operating System
Target version:
2.4.5
Start date:
07/03/2019
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:
All

Description

Full details at https://www.freebsd.org/security/advisories/FreeBSD-SA-19:10.ufs.asc but long story short, on UFS filesystems uninitialized directory padding may contain a few bytes of content from kernel memory readable by anyone who can access a directory.

To clean it up, at boot time before mounting root, this must be run:

fsck -t ufs -f -p -T ufs:-z

We already have code to run fsck then, but we need to trigger this special run just once for everyone unconditionally on upgrade to a release containing the fix.

RB Updated by Renato Botelho almost 7 years ago Actions
Copy link
 #1

  • Assignee set to Renato Botelho

RB Updated by Renato Botelho almost 7 years ago Actions
Copy link
 #2

  • Status changed from New to Feedback
  • % Done changed from 0 to 100

Applied in changeset commit:7373049764f144b2ea7c891bd60760ab64b41160.

JP Updated by Jim Pingle almost 7 years ago Actions
Copy link
 #3

  • Target version changed from 2.5.0 to 2.4.5

JP Updated by Jim Pingle over 6 years ago Actions
Copy link
 #4

  • Status changed from Feedback to New

This fix does not appear to be getting triggered. There is no sign of the expected messages during the upgrade process.

RB Updated by Renato Botelho over 6 years ago Actions
Copy link
 #5

  • Status changed from New to Feedback

Applied in changeset commit:4e8c5dfa5be3f5a0725728cba2f7fa1d0f92e860.

JP Updated by Jim Pingle over 6 years ago Actions
Copy link
 #6

  • Status changed from Feedback to Resolved

Looks good on 2.4.5 and 2.5.0 now. I see the message when the rc package is upgraded, and the expected messages and fsck output during the upgrade process. The expected files are present afterward showing that the fix was applied.

JP Updated by Jim Pingle over 6 years ago Actions
Copy link
 #7

  • Private changed from Yes to No
Actions
Copy link

Also available in: Atom