FFS security problem?

2006-06-18 Thread Pablo Marín Ramón
I've sent a similar message for discussion to the freebsd-questions@ mailing list. As OpenBSD has a focus on security I think it can be interesting here too. As metadata is updated synchronously in the classical (without softupdates) FFS, can we have the following case? Let's suppose block A cont

Re: About soft updates

2006-07-06 Thread Pablo Marín Ramón
> I've been trying to find out whether to enable soft updates or not, and > I have not really seen any reason not to, other than that it is not > enabled by default. Pros: * Improved performance * Faster recovery latency after a crash * Can handle a security problem that can occur (AFAIK) in ba

Re: About soft updates

2006-07-06 Thread Pablo Marín Ramón
> > * Improved performance > there are known scenarios where it does degrades performance. I meant in the general case. > > * Faster recovery latency after a crash > this is just not true at all. Effectively, background fsck isn't implemented yet under OpenBSD and NetBSD (FreeBSD has this featur

Re: About soft updates

2006-07-06 Thread Pablo Marín Ramón
> > > > * Improved performance > > > there are known scenarios where it does degrades performance. > > I meant in the general case. > me too Do you refer to systems with low memory (or at least the need to have the kernel not to occupy more memory than a minimum), for example? If not, some example

Re: About soft updates

2006-07-06 Thread Pablo Marín Ramón
> > Do you refer to systems with low memory (or at least the need to > > have the kernel not to occupy more memory than a minimum), for > > example? If not, some example would be really appreciated to get > > a deeper understanding of the technology. > > you can start by reading some on the subjec