md(4) (swap-base) disks not cleaned on creation
    Paul Schenkeveld 
    freebsd at psconsult.nl
       
    Tue Nov  6 18:47:06 UTC 2012
    
    
  
Hi,
When creating a swap based md(4) it may contain data which to me feels
like a security leak:
  # mdconfig -a -t swap -s 1m
  md0
  # hd /dev/md0
  00000000  c0 9b a8 00 08 00 00 00  00 5c 53 00 08 00 00 00  |À.¨......\S.....|
  00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  *
  00000250  38 9f a8 00 08 00 00 00  00 5c 53 00 08 00 00 00  |8.¨......\S.....|
  00000260  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  *
  00000330  88 a0 a8 00 08 00 00 00  00 5c 53 00 08 00 00 00  |. ¨......\S.....|
  00000340  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  *
  00000370  e8 a0 a8 00 08 00 00 00  00 5c 53 00 08 00 00 00  |è ¨......\S.....|
  00000380  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  *
  000005b0  48 a4 a8 00 08 00 00 00  00 5c 53 00 08 00 00 00  |H¤¨......\S.....|
  000005c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  *
  ^C
  # ls -l /dev/md0
  crw-r-----  1 root  operator  0xc8 Nov  6 19:42 /dev/md0
  #
Although not world-readable, it just doesn't feel right to me.
Any thoughts?
With kind regards,
Paul Schenkeveld
    
    
More information about the freebsd-security
mailing list