HardenedBSD/sbin
Kirk McKusick 75e3597abb Continuing efforts to provide hardening of FFS, this change adds a
check hash to cylinder groups. If a check hash fails when a cylinder
group is read, no further allocations are attempted in that cylinder
group until it has been fixed by fsck. This avoids a class of
filesystem panics related to corrupted cylinder group maps. The
hash is done using crc32c.

Check hases are added only to UFS2 and not to UFS1 as UFS1 is primarily
used in embedded systems with small memories and low-powered processors
which need as light-weight a filesystem as possible.

Specifics of the changes:

sys/sys/buf.h:
    Add BX_FSPRIV to reserve a set of eight b_xflags that may be used
    by individual filesystems for their own purpose. Their specific
    definitions are found in the header files for each filesystem
    that uses them. Also add fields to struct buf as noted below.

sys/kern/vfs_bio.c:
    It is only necessary to compute a check hash for a cylinder
    group when it is actually read from disk. When calling bread,
    you do not know whether the buffer was found in the cache or
    read. So a new flag (GB_CKHASH) and a pointer to a function to
    perform the hash has been added to breadn_flags to say that the
    function should be called to calculate a hash if the data has
    been read. The check hash is placed in b_ckhash and the B_CKHASH
    flag is set to indicate that a read was done and a check hash
    calculated. Though a rather elaborate mechanism, it should
    also work for check hashing other metadata in the future. A
    kernel internal API change was to change breada into a static
    fucntion and add flags and a function pointer to a check-hash
    function.

sys/ufs/ffs/fs.h:
    Add flags for types of check hashes; stored in a new word in the
    superblock. Define corresponding BX_ flags for the different types
    of check hashes. Add a check hash word in the cylinder group.

sys/ufs/ffs/ffs_alloc.c:
    In ffs_getcg do the dance with breadn_flags to get a check hash and
    if one is provided, check it.

sys/ufs/ffs/ffs_vfsops.c:
    Copy across the BX_FFSTYPES flags in background writes.
    Update the check hash when writing out buffers that need them.

sys/ufs/ffs/ffs_snapshot.c:
    Recompute check hash when updating snapshot cylinder groups.

sys/libkern/crc32.c:
lib/libufs/Makefile:
lib/libufs/libufs.h:
lib/libufs/cgroup.c:
    Include libkern/crc32.c in libufs and use it to compute check
    hashes when updating cylinder groups.

Four utilities are affected:

sbin/newfs/mkfs.c:
    Add the check hashes when building the cylinder groups.

sbin/fsck_ffs/fsck.h:
sbin/fsck_ffs/fsutil.c:
    Verify and update check hashes when checking and writing cylinder groups.

sbin/fsck_ffs/pass5.c:
    Offer to add check hashes to existing filesystems.
    Precompute check hashes when rebuilding cylinder group
    (although this will be done when it is written in fsutil.c
    it is necessary to do it early before comparing with the old
    cylinder group)

sbin/dumpfs/dumpfs.c
    Print out the new check hash flag(s)

sbin/fsdb/Makefile:
    Needs to add libufs now used by pass5.c imported from fsck_ffs.

Reviewed by: kib
Tested by: Peter Holm (pho)
2017-09-22 12:45:15 +00:00
..
adjkerntz
badsect
bsdlabel
camcontrol Fix whitespace bugs 2017-07-10 05:16:07 +00:00
ccdconfig
clri
comcontrol
conscontrol
ddb
decryptcore
devd Add HAS_TESTS to all Makefiles that are currently using the 2017-08-02 08:50:42 +00:00
devfs
dhclient Add HAS_TESTS to all Makefiles that are currently using the 2017-08-02 08:50:42 +00:00
dmesg
dump
dumpfs Continuing efforts to provide hardening of FFS, this change adds a 2017-09-22 12:45:15 +00:00
dumpon
etherswitchcfg
fdisk
ffsinfo
fsck
fsck_ffs Continuing efforts to provide hardening of FFS, this change adds a 2017-09-22 12:45:15 +00:00
fsck_msdosfs
fsdb Continuing efforts to provide hardening of FFS, this change adds a 2017-09-22 12:45:15 +00:00
fsirand
gbde
geom Provide an articulate example of how to properly delete partitions and 2017-09-19 15:08:31 +00:00
ggate
growfs Add HAS_TESTS to all Makefiles that are currently using the 2017-08-02 08:50:42 +00:00
gvinum Utilize SYSROOT from r320119 in places where DESTDIR may be wanting WORLDTMP. 2017-06-19 20:47:24 +00:00
hastctl
hastd
ifconfig Add supporting changes for Add limited sandbox capability to "make check" 2017-08-14 19:21:37 +00:00
init - Use strlcat() instead of strncat(). 2017-07-07 02:48:55 +00:00
ipf
ipfw ipfw: Note that bandwidth can take G suffix in the manpage 2017-06-23 17:31:07 +00:00
iscontrol
kldconfig
kldload
kldstat
kldunload
ldconfig
md5
mdconfig Add ability to label md(4) devices. 2017-08-28 15:54:07 +00:00
mdmfs
mknod
mksnap_ffs
mount Fix "mount -uw /" when the filesystem type doesn't match. 2017-07-08 11:06:27 +00:00
mount_cd9660
mount_fusefs
mount_msdosfs Remove msdosfs -o large support. 2017-06-09 12:06:22 +00:00
mount_nfs
mount_nullfs
mount_udf
mount_unionfs
nandfs
natd
newfs Continuing efforts to provide hardening of FFS, this change adds a 2017-09-22 12:45:15 +00:00
newfs_msdos
newfs_nandfs
nfsiod
nos-tun
nvmecontrol Print the controller's ID in identify. 2017-08-28 23:54:08 +00:00
pfctl Add HAS_TESTS to all Makefiles that are currently using the 2017-08-02 08:50:42 +00:00
pflogd
ping We use a few different ifdef's names to check if we are using Casper or not, 2017-09-21 14:41:41 +00:00
ping6
quotacheck
rcorder
reboot .Xr mount.conf(5) from boot(8). 2017-05-28 18:13:44 +00:00
recoverdisk
resolvconf
restore
route Typo, the '-6' option selects inet6. 2017-08-15 19:29:10 +00:00
routed
rtsol
savecore Fix style and wrap lines to 80 columns in savecore.c. 2017-07-24 21:51:41 +00:00
sconfig
setkey
shutdown
spppcontrol
sunlabel
swapon
sysctl kern.osreldate is an integer, not a string 2017-09-16 16:23:00 +00:00
tests
tunefs
umount Add a new "-N" option to umount(8), that does a forced dismount of an NFS mount 2017-07-29 20:08:25 +00:00
zfsbootcfg
Makefile Remove SUBDIR ordering/uniquifying in *bin/Makefile 2017-07-06 04:15:30 +00:00
Makefile.amd64
Makefile.arm
Makefile.i386
Makefile.inc
Makefile.mips
Makefile.sparc64