Re: [PATCH] Support for secure erase functionality

2017-11-15 Thread Pavel Machek
Hi! > On 9/14/17 00:37, Philipp Guendisch wrote: > > This patch adds a software based secure erase option to improve data > > confidentiality. The CONFIG_BLK_DEV_SECURE_ERASE option enables a mount > > flag called 'sw_secure_erase'. When you mount a volume with this flag, > > every discard call

Re: [PATCH] Support for secure erase functionality

2017-09-22 Thread Máté Horváth
Dear Johannes Thumshirn, > How can this work with CoW filesystems? Because we are a layer below filesystems, that depends on the actual implementation. If the discards are issued to the right sectors on the drive, we write into those sectors. >> Built against torvalds/linux > > This should go

Re: [PATCH] Support for secure erase functionality

2017-09-14 Thread Damien Le Moal
Philipp, On 9/14/17 21:51, Philipp wrote: > Dear Damien, > > Thank you for your feedback. > >> On 14. Sep 2017, at 10:46, Damien Le Moal >> wrote: > > […] > >> Writing once to a sector stored on spinning rust will *not* fully >> erase the previous data. Part of the

Re: [PATCH] Support for secure erase functionality

2017-09-14 Thread Philipp
Dear Damien, Thank you for your feedback. > On 14. Sep 2017, at 10:46, Damien Le Moal wrote: […] > Writing once to a sector stored on spinning rust will *not* fully erase > the previous data. Part of the signal used for storing that data will > remain on the track

Re: [PATCH] Support for secure erase functionality

2017-09-14 Thread Damien Le Moal
Philipp, On 9/14/17 00:37, Philipp Guendisch wrote: > This patch adds a software based secure erase option to improve data > confidentiality. The CONFIG_BLK_DEV_SECURE_ERASE option enables a mount > flag called 'sw_secure_erase'. When you mount a volume with this flag, > every discard call is

Re: [PATCH] Support for secure erase functionality

2017-09-14 Thread Johannes Thumshirn
On Wed, Sep 13, 2017 at 05:37:53PM +0200, Philipp Guendisch wrote: > This patch adds a software based secure erase option to improve data > confidentiality. The CONFIG_BLK_DEV_SECURE_ERASE option enables a mount > flag called 'sw_secure_erase'. When you mount a volume with this flag, > every

[PATCH] Support for secure erase functionality

2017-09-13 Thread Philipp Guendisch
This patch adds a software based secure erase option to improve data confidentiality. The CONFIG_BLK_DEV_SECURE_ERASE option enables a mount flag called 'sw_secure_erase'. When you mount a volume with this flag, every discard call is prepended by an explicit write command to overwrite the data