File 0008-metadump-Obfuscate-the-filesystem-label.patch of Package xfsprogs

Overview Repositories Revisions Requests Users Attributes Meta

File 0008-metadump-Obfuscate-the-filesystem-label.patch of Package xfsprogs (Revision 59f808e395e9b699a1b5de2e55c862cb)

Currently displaying revision 59f808e395e9b699a1b5de2e55c862cb , Show latest

From 8927d44b632cfdf49338a12b0b7a7a58a474de98 Mon Sep 17 00:00:00 2001
From: Eric Sandeen <sandeen@sandeen.net>
Date: Thu, 30 Jul 2015 09:17:43 +1000
Subject: [PATCH 08/20] metadump: Obfuscate the filesystem label
References: bsc#939367 CVE-2012-2150

Not a lot of room for sensitive data, but while
we're at it...

There is no need to do the normal hashed name,
we just replace it with "L's" - and for kicks,
we preserve the length of the label.

Signed-off-by: Eric Sandeen <sandeen@redhat.com>
Signed-off-by: Eric Sandeen <sandeen@sandeen.net>
Reviewed-by: Brian Foster <bfoster@redhat.com>
Signed-off-by: Dave Chinner <david@fromorbit.com>
Acked-by: Jan Kara <jack@suse.com>

---
 db/metadump.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/db/metadump.c b/db/metadump.c
index bea5de7c332d..5cc1ece983e6 100644
--- a/db/metadump.c
+++ b/db/metadump.c
@@ -2049,6 +2049,13 @@ scan_ag(
 		if (stop_on_read_error)
 			goto pop_out;
 	} else {
+		/* Replace any filesystem label with "L's" */
+		if (obfuscate) {
+			struct xfs_sb *sb = iocur_top->data;
+			memset(sb->sb_fname, 'L',
+			       min(strlen(sb->sb_fname), sizeof(sb->sb_fname)));
+			iocur_top->need_crc = 1;
+		}
 		if (write_buf(iocur_top))
 			goto pop_out;
 	}
-- 
2.1.4

Places

File 0008-metadump-Obfuscate-the-filesystem-label.patch of Package xfsprogs (Revision 59f808e395e9b699a1b5de2e55c862cb)

Places