From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alan Cox Subject: Re: dm-integrity: integrity protection device-mapper target Date: Mon, 21 Jan 2013 13:51:57 +0000 Message-ID: <20130121135157.47a68a57@bob.linux.org.uk> References: <20130118231633.GM27585@agk-dp.fab.redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Cc: Alasdair G Kergon , , , , Mikulas Patocka , Milan Broz To: "Kasatkin, Dmitry" Return-path: Received: from mga01.intel.com ([192.55.52.88]:43499 "EHLO mga01.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751178Ab3AUNba (ORCPT ); Mon, 21 Jan 2013 08:31:30 -0500 In-Reply-To: Sender: linux-fsdevel-owner@vger.kernel.org List-ID: > This is not to provide reliability. > Default is to return error. But zero might be desirable. There are cases where being able to force blocks to all zeros is itself a security attack and it seems an odd behaviour. Error on read/allow write seems sensible enough. --------------------------------------------------------------------- Intel Corporation (UK) Limited Registered No. 1134945 (England) Registered Office: Pipers Way, Swindon SN3 1RJ VAT No: 860 2173 47 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies. From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alan Cox Subject: Re: dm-integrity: integrity protection device-mapper target Date: Mon, 21 Jan 2013 13:51:57 +0000 Message-ID: <20130121135157.47a68a57@bob.linux.org.uk> References: <20130118231633.GM27585@agk-dp.fab.redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Return-path: In-Reply-To: Sender: linux-fsdevel-owner@vger.kernel.org To: "Kasatkin, Dmitry" Cc: Alasdair G Kergon , dm-devel@redhat.com, akpm@linux-foundation.org, linux-fsdevel@vger.kernel.org, Mikulas Patocka , Milan Broz List-Id: dm-devel.ids > This is not to provide reliability. > Default is to return error. But zero might be desirable. There are cases where being able to force blocks to all zeros is itself a security attack and it seems an odd behaviour. Error on read/allow write seems sensible enough. --------------------------------------------------------------------- Intel Corporation (UK) Limited Registered No. 1134945 (England) Registered Office: Pipers Way, Swindon SN3 1RJ VAT No: 860 2173 47 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.