linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: "Artem S. Tashkinov" <aros@gmx.com>
To: linux-kernel@vger.kernel.org
Cc: leah.rumancik@gmail.com
Subject: Re: [PATCH v4] ext4: wipe ext4_dir_entry2 upon file deletion
Date: Fri, 2 Jul 2021 13:29:52 +0000	[thread overview]
Message-ID: <b99d8632-6e3d-b557-0ca4-7416a9d818d5@gmx.com> (raw)

Hi,

I'm curious about the nature of this feature. Does it make restoring
accidentally deleted files more difficult or even impossible? OK, data
remains but the patch description makes it sound like all the metadata
is being wiped completely.

 > Upon file deletion, zero out all fields in ext4_dir_entry2
 > besides rec_len. In case sensitive data is stored in filenames,
 > this ensures no potentially sensitive data is left in the directory
 > entry upon deletion. Also, wipe these fields upon moving a directory
 > entry during the conversion to an htree and when splitting htree
 > nodes.

If it's the case, is it possible to make this new security feature user
configurable? I'm OK with it being on by default but I'd be glad if
there were a mount option to disable it.

Best regards,
Artem

             reply	other threads:[~2021-07-02 13:29 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-07-02 13:29 Artem S. Tashkinov [this message]
2021-07-02 16:01 ` [PATCH v4] ext4: wipe ext4_dir_entry2 upon file deletion Theodore Ts'o

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=b99d8632-6e3d-b557-0ca4-7416a9d818d5@gmx.com \
    --to=aros@gmx.com \
    --cc=leah.rumancik@gmail.com \
    --cc=linux-kernel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).