Can you explain to me how journaling really helps here? It was my
understanding that ultimately Stephen will only do journaling of meta-data
and then it is not clear to me how to fix these problems.
I also wonder if POSIX or something like that doesn't actually mandate that
data blocks can _never_ migrate from one file to another like this.
- Peter -
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Matthew
> Kirkwood
> Sent: Wednesday, August 18, 1999 10:38 AM
> To: Peter J. Braam
> Cc: [EMAIL PROTECTED]
> Subject: RE: disk write reordering, ext2 and security
>
>
> On Wed, 18 Aug 1999, Peter J. Braam wrote:
>
> > Whoops, of course, only if the power goes out. But then, this is
> > still a serious problem.
>
> True. This is one of the under-mentioned advantages
> of journalling, of course.
>
> e2fsck tends to be very paranoid about reassembling
> files where the ownership of data is in doubt, but
> of course when data has changed, but not metadata,
> there are security implications here.
>
> -o sync in particularly sensitive filesystems is a
> start, but we really need logging before we are
> fully safe from this.
>
> Matthew.
>
