Messages in this thread |  | | | From | "Hua Zhong" <> | | Subject | RE: [PATCH 0/8][RFC] IO latency/throughput fixes | | Date | Mon, 6 Apr 2009 15:52:50 -0700 |
| |
> Security on an embedded device starts with controlling physical > access. If they have access to the storage media all bets are off, > whether it's data=ordered or not. (Access to the storage media is > really what we're talking about here -- medical data, for example, > hitting the platter before the metadata updates that then make that > data unaccessible to other userspace processes.) > > Because *if* they have access to the media, they can replace any > running code on that box, and your security is worthless. > > So no, I don't see how that's a valid argument.
The problem with security has nothing to do with embedded. It's that when you commit metadata first and crash before you write the data, then you get to see random blocks which might contain sensitive information from other users.
Hua
|  |