Re: security issue: hard disk lock

2005-04-15 Thread Alan Cox
On Llu, 2005-04-11 at 17:01, Jonas Diemer wrote: > Yes, but a new video-card or Motherboard can be easily bought (although it > costs), but the data on a locked disk is lost forever, unless you pay for > professional recovery (which is also a time-issue, if time critical data is > stored on the

Re: security issue: hard disk lock

2005-04-13 Thread Mark Lord
hdparm-6.0 is currently winding through release channels, and includes support for freezing/managing the security status. Cheers - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/maj

Re: security issue: hard disk lock

2005-04-11 Thread Jonas Diemer
Hi Alan! Thanks for the info Am Montag 11. April 2005 17:36 schrieb Alan Cox: > It makes little difference as the attacker can replace the kernel and > reboot. > Anyway they can flash erase your video card bios, your IDE firmware, > your BIOS > and far more just as easily. Yes, but a new video-c

Re: security issue: hard disk lock

2005-04-11 Thread Alan Cox
On Llu, 2005-04-04 at 18:42, Jonas Diemer wrote: > I figured there could be a kernel compiled-in option that will make the > kernel > lock all drives found during bootup. then, a malicous program would need to > install a different kernel in order to harm the drive, which would be much > more s

Re: security issue: hard disk lock

2005-04-05 Thread Jonas Diemer
Am Dienstag 05. April 2005 17:41 schrieb Vernon Mauery: >  This makes sense because a particularly malicious > place to put something like this is a worm that attaches to your boot > loader.  Then, even doing it in the kernel at boot time is too late. I understand... Didn't know that worms could a

Re: security issue: hard disk lock

2005-04-05 Thread Vernon Mauery
Horst von Brand wrote: > Jonas Diemer <[EMAIL PROTECTED]> said: > > [...] > > >>I figured there could be a kernel compiled-in option that will make the >>kernel lock all drives found during bootup. then, a malicous program >>would need to install a different kernel in order to harm the drive, >>

Re: security issue: hard disk lock

2005-04-04 Thread Chris Friesen
Horst von Brand wrote: Doing it in initrd should be plenty of time, no need to involve the kernel. Not everyone uses an initrd. Chris - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.or

Re: security issue: hard disk lock

2005-04-04 Thread Florian Weimer
* Jonas Diemer: > What do you think of this? I think that these days, the underlying assumption (software cannot destroy hardware, and if it can, we have a problem) is simply no longer valid. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [E

Re: security issue: hard disk lock

2005-04-04 Thread Horst von Brand
Jonas Diemer <[EMAIL PROTECTED]> said: [...] > I figured there could be a kernel compiled-in option that will make the > kernel lock all drives found during bootup. then, a malicous program > would need to install a different kernel in order to harm the drive, > which would be much more secure.

security issue: hard disk lock

2005-04-04 Thread Jonas Diemer
Hello! I don't know if you guys already know, there is a possible security risk with all modern desktop-pcs and ata hard drives. In short: Modern ata drives can be locked by password. This lock could be set by a malicous software. This security feature can be frozen, so no programs can set a l