Re: FreeBSD Security Advisory FreeBSD-SA-23:01.geli
Mariusz Zaborski <[email protected]>
| Newsgroups | gmane.os.freebsd.security.general |
|---|---|
| Message-ID | <CAGOYWV-2tEa=nv7LecOBANH_wE=trKxcmTaabUgPwr-7WKCDLg@mail.gmail.com> |
When I was working on the patch, I analyzed this situation. The issue with key files is that they can be arbitrary in size, and I think this caused this issue. The passfile/passwords are limited in size. Because they are limited, they are cached in the memory of geli and reused. My conclusion was that there isn't such an issue with them. Ofc it is always good to double-check. You can follow the usage of the cached_passphrase variable: https://cgit.freebsd.org/src/tree/lib/geom/eli/geom_eli.c#n71 On Wed, 8 Feb 2023 at 22:13, grarpamp <[email protected]> wrote: > Did anyone check if -j/-J might have similar edge cases? > >