Re: How trustworthy is that I/O device?
Manuel Bouyer <[email protected]>
| Newsgroups | gmane.os.netbsd.devel.security |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Nov 06, 2013 at 02:21:32PM -0800, Matt Thomas wrote: > > On Nov 4, 2013, at 2:34 PM, Erik Fair <[email protected]> wrote: > > > All OSes have a problem with USB and potentially all other hot-plug I/O busses: can you trust the device that was just plugged into the bus? How much I/O do you permit to it before explicit authorization of some kind? > > I've always wondered why we "trust" file systems and panic they aren't > what we expect. We don't do that for networking. If seems if we encounter > an inconsistency, we mark the f/s as read-only and either return an error > or complete the action if possible. I want this to be a mount option. For non-removable device these errors are inducations that something misbehaved badly, and a panic is reasonable. Leaving the system running with a RO fs would make more damage than a panic ("ops I accepted an email but now can't write it to the user's mailbox" :( -- Manuel Bouyer <[email protected]> NetBSD: 26 ans d'experience feront toujours la difference --