Scrub dm-integrity devices

Mikael

Last update: Feb 26, 2022

Related tags

Cryptography integrity-scrub

Overview

Synopsis

This tool attempts to read all logical sectors of a block device, overwriting any sector that cannot be read due to an I/O error with zeros. It is intended to restore Linux dm-integrity volumes with invalid (corrupted) integrity tags.

Usage

If you wish to scrub a volume, consider creating a backup of the underlying physical device first.

Then run the tool with the volume device path (/dev/mapper/… or /dev/dm-…) as its single command‐line argument.

Implementation notes

The block device is first read in large chunks (the maximum sectors per request as reported by the BLKSECTGET ioctl). If a read results in an I/O error (EIO), the logical sectors in the chunk are read individually and any sector that results in an I/O error is overwritten with zeros.

Caveat

This tool might delete all your data and summon a seal. Use it at your own risk. The seal will demand fish.

If you are not using a filesystem with copy‐on‐write semantics or data journalling, you should probably rely on dm-integrity’s data journal.

You might also like...

SixtyFPS is a toolkit to efficiently develop fluid graphical user interfaces for any display: embedded devices and desktop applications. We support multiple programming languages, such as Rust, C++ or JavaScript.

SixtyFPS is a toolkit to efficiently develop fluid graphical user interfaces for any display: embedded devices and desktop applications. We support multiple programming languages, such as Rust, C++ or JavaScript.

5.5k Jan 1, 2023

The official kernel for Popcorn OS, and operating system designed for handheld devices.

About Popkern is the kernel for Popcorn OS, an operating system designed for handheld devices. As such, the kernel is (to be) optimised at all levels

3 Sep 19, 2021

mach-dump can parse Mach-O core dumps taken with lldb from macOS and iOS devices.

mach-dump mach-dump can parse Mach-O core dumps taken with lldb from macOS and iOS devices. It has no external dependencies. Example use std::path::Pa

8 Sep 16, 2022

Incremental, multi-version remote backup tool for block devices.

bsync Incremental, multi-version remote backup tool for block devices. The on-disk backup format is a SQLite database and I've been dogfooding this on

7 Aug 21, 2022

Android Device Pool - A tool to run device tests against a pool of devices.

adp (Android Device Pool) What is this? A tool to run device tests against a pool of devices. It will 'checkout' a device to run your tests against an

1 Oct 21, 2021

Cross-platform GUI written in Rust using ADB to debloat non-rooted android devices. Improve your privacy, the security and battery life of your device.

Universal Android Debloater GUI DISCLAIMER: Use it at your own risk. I am not responsible for anything that could happen to your phone. This software

7k Jan 7, 2023

Cross-platform GUI written in Rust using ADB to debloat non-rooted android devices

Cross-platform GUI written in Rust using ADB to debloat non-rooted android devices. Improve your privacy, the security and battery life of your device.

6.8k Jan 2, 2023

Private payments for mobile devices.

Testing your first payment Please see TESTNET.md for instructions on participating in the TestNet! Sending your first payment Please see MAINNET.md fo

1.1k Dec 30, 2022

SpringQL: Open-source stream processor for IoT devices and in-vehicle computers

What is SpringQL? SpringQL is an open-source stream processor specialized in memory efficiency. It is supposed to run on embedded systems like IoT dev

25 Dec 26, 2022

Easy WiFi setup for Linux devices from your mobile phone or laptop

Easy WiFi setup for Linux devices from your mobile phone or laptop WiFi Connect is a utility for dynamically setting the WiFi configuration on a Linux

1.1k Dec 31, 2022

Many modbus devices support only one or very few clients

Modbus TCP proxy Many modbus devices support only one or very few clients. This proxy acts as a bridge between the client and the modbus device. It ca

6 Aug 10, 2022

a test harness for embedded devices

defmt-test a test harness for embedded devices This crate has been moved to the defmt repository Support defmt-test is part of the Knurling project, F

8 Aug 27, 2022

defmt is a highly efficient logging framework that targets resource-constrained devices, like microcontrollers

defmt defmt ("de format", short for "deferred formatting") is a highly efficient logging framework that targets resource-constrained devices, like mic

476 Jan 2, 2023

Adds a uf2 header Microsofts HID Flashing Format (UF2) for copying over to UF2 bootloader mass storage devices

uf2conv Adds a uf2 header Microsofts HID Flashing Format (UF2) for copying over to UF2 bootloader mass storage devices. UF2 is factory programmed exte

22 Oct 16, 2022

Software for managing Stream Deck devices with folders and actions

Streamduck Software for managing Stream Deck devices with folders and actions Project that will perhaps be better than streamdeck-ui Currently still i

21 Dec 16, 2022

Easily sync your clipboard between devices. This is a work in progress app.

Clipboard Sync Description Easily sync your clipboard between devices. This is a work in progress app. Stack Frontend: React Tauri isomorphic-ws TSX,

2 Mar 2, 2022

Left To My Own Devices - NT hash tools

ntcrack Left To My Own Devices - NT cracker A full writeup of how it works is available at the SensePost blog Invocation ./ntcrack input hashlist w

24 Nov 24, 2022

Ector is an open source async, no-alloc actor framework for embedded devices

Ector is an open source async, no-alloc actor framework for embedded devices. Ector is an open source async, no-alloc actor framework for embedded dev

11 Dec 15, 2022

Rust Library for controlling divoom devices that support REST APIs, such as pixoo-64.

Divoom Rust Library for controlling divoom devices that support REST APIs, such as pixoo-64 (and from how divoom's api/doc organizes, maybe more in th

16 Dec 23, 2022

Comments

RUSTSEC-2021-0119: Out-of-bounds write in nix::unistd::getgrouplist

Out-of-bounds write in nix::unistd::getgrouplist

| Details | | | ------------------- | ---------------------------------------------- | | Package | nix | | Version | 0.21.0 | | URL | https://github.com/nix-rust/nix/issues/1541 | | Date | 2021-09-27 | | Patched versions | ^0.20.2,^0.21.2,^0.22.2,>=0.23.0 | | Unaffected versions | <0.16.0 |

On certain platforms, if a user has more than 16 groups, the nix::unistd::getgrouplist function will call the libc getgrouplist function with a length parameter greater than the size of the buffer it provides, resulting in an out-of-bounds write and memory corruption.

The libc getgrouplist function takes an in/out parameter ngroups specifying the size of the group buffer. When the buffer is too small to hold all of the reqested user's group memberships, some libc implementations, including glibc and Solaris libc, will modify ngroups to indicate the actual number of groups for the user, in addition to returning an error. The version of nix::unistd::getgrouplist in nix 0.16.0 and up will resize the buffer to twice its size, but will not read or modify the ngroups variable. Thus, if the user has more than twice as many groups as the initial buffer size of 8, the next call to getgrouplist will then write past the end of the buffer.

The issue would require editing /etc/groups to exploit, which is usually only editable by the root user.

See advisory page for additional details.

opened by github-actions[bot] 1

Scrub dm-integrity devices

Related tags

Overview

Synopsis

Usage

Implementation notes

Caveat

You might also like...

SixtyFPS is a toolkit to efficiently develop fluid graphical user interfaces for any display: embedded devices and desktop applications. We support multiple programming languages, such as Rust, C++ or JavaScript.

The official kernel for Popcorn OS, and operating system designed for handheld devices.

mach-dump can parse Mach-O core dumps taken with lldb from macOS and iOS devices.

Incremental, multi-version remote backup tool for block devices.

Android Device Pool - A tool to run device tests against a pool of devices.

Cross-platform GUI written in Rust using ADB to debloat non-rooted android devices. Improve your privacy, the security and battery life of your device.

Cross-platform GUI written in Rust using ADB to debloat non-rooted android devices

Private payments for mobile devices.

SpringQL: Open-source stream processor for IoT devices and in-vehicle computers

Easy WiFi setup for Linux devices from your mobile phone or laptop

Many modbus devices support only one or very few clients

a test harness for embedded devices

defmt is a highly efficient logging framework that targets resource-constrained devices, like microcontrollers

Adds a uf2 header Microsofts HID Flashing Format (UF2) for copying over to UF2 bootloader mass storage devices

Software for managing Stream Deck devices with folders and actions

Easily sync your clipboard between devices. This is a work in progress app.

Left To My Own Devices - NT hash tools

Ector is an open source async, no-alloc actor framework for embedded devices

Rust Library for controlling divoom devices that support REST APIs, such as pixoo-64.

Comments

RUSTSEC-2021-0119: Out-of-bounds write in nix::unistd::getgrouplist

Owner

Mikael

Private payments for mobile devices.

Left To My Own Devices - NT hash tools

Bitcoin PSBT signer, descriptor exporter and more for offline devices.

Narrowlink securely connects devices and services together, even when both nodes are behind separate NAT

Limit screen time to children's various mobile devices by blocking internet access on the family Wifi router.

Experimental kernel for embedded devices written in Rust

A utility for mapping events from Linux event devices.

Private payments for mobile devices.

Dragit - Application for intuitive file sharing between devices.

📜 A pci.ids-compliant library for getting information about available PCI devices.