在 2024/9/29 20:26, Richard Weinberger 写道:
----- Ursprüngliche Mail -----
Von: "Daniel Golle" <daniel@xxxxxxxxxxxxxx>
Allow the boot firmware to define volumes which are critical for the
system to boot, such as the bootloader itself if stored inside a UBI
volume. Protect critical volumes by preventing the user from removing,
resizing or writing to them, and also prevent the UBI device from
being detached if a critical volume is present.
I agree with the doubts raised in patch 1/2, if userspace is so hostile
to delete system partitions, there is little hope.
But I'm still open for discussion.
Yes, I agree that it is meaningful to prevent user from operating
volumes accidently. How about doing that by some existing methods? Eg.
selinux(Design sepolicy for ioctl cmd).
What I veto is preventing detach.
This makes a clean tear down of the system impossible.
It becomes more and more common that advanced userspace shuts down
everything it setup during boot. e.g. while reboot switching back
to an initramfs, umounting root, shutting down all storage, etc...
Thanks,
//richard
______________________________________________________
Linux MTD discussion mailing list
http://lists.infradead.org/mailman/listinfo/linux-mtd/
