diff options
author | Lennart Poettering <lennart@poettering.net> | 2020-06-01 19:40:30 +0200 |
---|---|---|
committer | Lennart Poettering <lennart@poettering.net> | 2020-06-25 15:02:00 +0200 |
commit | 0dbe57ee86a5311d8a6c099f76ba95b73872439b (patch) | |
tree | 3525da22453d1d4605e71d2c8e02950eac96d498 /src/journal/compress.h | |
parent | 4ce534f4cd950cb22abacdfd4d967b41b890a706 (diff) | |
download | systemd-0dbe57ee86a5311d8a6c099f76ba95b73872439b.tar.gz |
journal-file: when individual hash chains grow too large, rotate
Even with the new keyed hash table journal feature: if an attacker
manages to get access to the journal file id it could synthesize records
that result in hash collisions. Let's rotate automatically when we
notice that, so that a new journal file ID is generated, our performance
is restored and the attacker has to guess a new file ID before being
able to trigger the issue again.
That said, untrusted peers should never get access to journal files in
the first case...
Diffstat (limited to 'src/journal/compress.h')
0 files changed, 0 insertions, 0 deletions