Page MenuHomeFreeBSD

netdump: Don't store sensitive key data we don't need
ClosedPublic

Authored by cem on May 10 2019, 8:35 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Jan 18, 4:14 AM
Unknown Object (File)
Dec 17 2024, 9:55 AM
Unknown Object (File)
Dec 17 2024, 3:20 AM
Unknown Object (File)
Dec 3 2024, 8:27 PM
Unknown Object (File)
Nov 24 2024, 3:44 AM
Unknown Object (File)
Nov 19 2024, 7:00 AM
Unknown Object (File)
Oct 29 2024, 3:03 AM
Unknown Object (File)
Sep 18 2024, 8:14 PM
Subscribers

Details

Summary

The diocskerneldump_arg and netdump_conf (with embedded diocskerneldump_arg)
before it were copied in whole to the global nd_conf variable. After EKCD,
the diocskerneldump_arg contains sensitive key material. Before this
revision, de-configuring netdump would not remove the the key material from
global nd_conf.

Netdump doesn't have any use for the key data (that is handled in the core
dumper code), so just don't store it.

Unfortunately, I think this dates to the initial import of netdump in
r333283.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable