summaryrefslogtreecommitdiff
path: root/src/journal/compress.h
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2020-06-01 19:40:30 +0200
committerLennart Poettering <lennart@poettering.net>2020-06-25 15:02:00 +0200
commit0dbe57ee86a5311d8a6c099f76ba95b73872439b (patch)
tree3525da22453d1d4605e71d2c8e02950eac96d498 /src/journal/compress.h
parent4ce534f4cd950cb22abacdfd4d967b41b890a706 (diff)
downloadsystemd-0dbe57ee86a5311d8a6c099f76ba95b73872439b.tar.gz
journal-file: when individual hash chains grow too large, rotate
Even with the new keyed hash table journal feature: if an attacker manages to get access to the journal file id it could synthesize records that result in hash collisions. Let's rotate automatically when we notice that, so that a new journal file ID is generated, our performance is restored and the attacker has to guess a new file ID before being able to trigger the issue again. That said, untrusted peers should never get access to journal files in the first case...
Diffstat (limited to 'src/journal/compress.h')
0 files changed, 0 insertions, 0 deletions