Messages in this thread | | | Date | Mon, 30 Jun 2008 16:39:48 -0600 (MDT) | Subject | [ANNOUNCE] Forensic File System GUID Linux/Windows and patches | From | jmerkey@wolfmoun ... |
| |
The following GUID is being used in the Wolf Mountain Group, Inc. Forensic File System (FFS) for GPT intel EFI partitions. Since there is no central registry for EFI GUID's it is posted here for referece for folks who may run across it on Windows Vista, 2003, and 2008 systems running ForenFS on Windows that may be using dual boot with Linux or vmware:
#define PARTITION_FORENFS_GUID \ EFI_GUID(0x83968a41, 0x5fe6, 0x4f9e, \ 0x91, 0x11, 0x52, 0xcf, 0x82, 0x8c, 0x51, 0x0a)
As per Peter Anvin's suggestion, uuidgen -r was used to regenerate the uuid value for the Forensic Filesystem and I have updated the Windows code base to reflect this change. As per Lennart Sorensen's suggestion, the FS name has been changed to "ForenFS" to avoid yet another driver named "ffs".
The following patches, utilities, etc. are being posted to support Linux accessing these partitions under EFI GPT.
ftp://ftp.wolfmountaingroup.org/pub/parted/parted-1.8.8-forenfs-06-30-08.patch ftp://ftp.wolfmountaingroup.org/pub/parted/parted-1.8.8-forenfs.tar.gz ftp://ftp.wolfmountaingroup.org/pub/parted/parted-1.8.8.tar.gz
EFI GPT changes to Linux to detect these partitions are in the attached patch
ftp://ftp.wolfmountaingroup.org/pub/forenfs/forenfs-2.6.18-el5-06-30-08.patch
Jeffrey Vernon Merkey
| |