Dear Nigel,
Feel free to put me in my place if I am wrong here :
When you try to boot a tuxonice capable computer and
restore the state of the computer using a hibernation file...
you are asked for a password, which is not the standard userland
login prompt (for a imple reason : there is no kernel in memory at that
time).
That password is part of tux on ice, right ?
Well, that password can be retreived from RAM !
Best regards,
Jonathan-
Nigel Cunningham wrote:
> Hi again.
>
> On Mon, 2008-07-28 at 14:20 +0530, Jonathan Brossard wrote:
>
>> Dear Nigel,
>>
>>
>>> This is not a bug in TuxOnIce (or for that matter other Linux
>>> hibernation implementations, which would have the same issue).
>>>
>> Yes it is.
>>
>>
>>> TuxOnIce has no way to know what running applications have passwords
>>> stored in memory or whether they are storing them in an encrypted format
>>> or not. Bugs should be filed against applications that are storing
>>> passwords in plain text.
>>>
>> We are talking about the password of tuxonice itself here...
>>
>
> TuxOnIce itself doesn't have any password support. Do you mean a
> password for encrypted swap or such like?
>
>
>> Please boot a computer using tuxonice, go for hibernation,
>> reboot, and then type this (as root) :
>>
>> xxd -l 32 -s 0x041e /dev/mem
>>
>>
>>
>>> By the way, these contact email addresses are grossly out of date. For
>>> TuxOnIce, the contact is nigel@xxxxxxxxxxxxx For swsusp and uswsusp
>>> (which would have the same problem), refer to linux-pm@xxxxxxxxxxxxxxx
>>>
>> I did my best to find one on the site's website and ended up
>> taking those of sourceforge.
>>
>
> Hmm, you're right there. I'll address that shortly.
>
> Regards,
>
> Nigel
>
>
>
--
Jonathan Brossard
Security Research Engineer
iViZ Techno Solutions Pvt. Ltd.
Mobile: +91-9748772994
Kolkata:
iViZ Technolgy Solutions(P) Ltd
c/o Erevmax Technologies (P) Ltd
DLF IT Park,
Tower-1, 12th Floor
08 Major Arterial Road
New Town, Rajarhat
Kolkata- 700 156
Kharagpur:
iViZ Techno Solutions Pvt Ltd,
School of Information Technology,
Indian Institute of Technology,
2nd Floor, Takshashila,
Kharagpur 721302 West Bengal, India.
Phone: +91-3222-282300 ext 4324
Web page: http://www.ivizindia.com
_______________________________________________
linux-pm mailing list
linux-pm@xxxxxxxxxxxxxxxxxxxxxxxxxx
https://lists.linux-foundation.org/mailman/listinfo/linux-pm
