Re: [Security-Discuss] [ MDKSA-2006:086 ] - Don't update the kernel on Soft-RAID-Sytems

"Luiz Fernando N. Capitulino" <[email protected]> Mon, 22 May 2006 10:13:15 -0300
Newsgroups gmane.linux.mandrake.security.general
Organization Mandriva
Message-ID <[email protected]>
On Mon, 22 May 2006 12:58:26 +0200
Luca Berra <[email protected]> wrote:

| On Sun, May 21, 2006 at 06:07:58PM +0200, Juergen Holm wrote:
| >On Sun, 21 May 2006, Luca Berra wrote:
| >>this is not 100% correct
| >>with -18mdk /dev/md0 is registered when md is loaded
| >>md != 0 are never registered at module loading
| >>with -21mdk no /dev/md* devices are registered at module loading
| >>-21mdk behaviour is the correct one (we should not register non-existent
| >>devices)
| >
| >Agree. I didn't know this fact.
| >Curious: the mdadm.conf of initrd of 21mdk has no auto=yes, but anyway..
| 
| mdassemble in initrd is a little bit different. it does not support
| auto= flag, so initrd precreated the /dev/md* file.
| 
| >>>I think you should make an announce of this Bug on the sec announce
| >>>list, to help other people not to run into the same problem.
| >>The difficult thing would be find the correct wording to describe this
| >>issue. 
| >>In any case, discussion on the md development list is gearing to making
| >>auto=yes the default, since too many people are getting bit by udev.
| >
| >Somethine like this:
| >"users of softraid should ensure, that every ARRAY line in
| >mdadm.conf contains
| >			auto=yes
| >
| >before installing 21mdk. This is because of a change in registering  
| >devices"
| >
| Luiz, can you ensure this is done?

 Sure, is only the announce enough?

-- 
Luiz Fernando N. Capitulino
____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________