Date: Sun, 17 Jun 2012 17:51:05 +0300 From: Efstratios Karatzas <gpf.kira@gmail.com> To: soc-status@freebsd.org Subject: Kernel Level File Integrity Checker report #4 Message-ID: <CAHywV0i4z%2Bnb6seHKaALK7acApXMUoFR3bN9ySPL4XyZxGDsHQ@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
During week #4: * pefs_mount() can be supplied the "-o checksum" option, which enables integrity checking in pefs kernel driver. If this option is found during VFS_MOUNT(), our driver acquires a vnode for the .pefs.checksum file and loads its header as well as the index part of .pefs.checksum which is kept in kernel heap. Resources are deallocated and checksum vnode vreled during pefs_unmount() (VFS_UNMOUNT()). * When a new pefs vnode is generated as a result of a VOP_LOOKUP() call, we look it up in our checksum index tables. If an entry for our file is found, we keep a pointer to that entry with the pefs vnode. This reference will be later used e.g. during a VOP_READ() call where we will test the checksum of the block that was retrieved from disk against the checksum from .pefs.checksum. -- Efstratios "GPF" Karatzas
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAHywV0i4z%2Bnb6seHKaALK7acApXMUoFR3bN9ySPL4XyZxGDsHQ>