Cc: <davecb@...>, <rmeijer@...>, Alan Cox <alan@...>, <capibara@...>, Eric Paris <eparis@...>, Theodore Tso <tytso@...>, Rik van Riel <riel@...>, <linux-security-module@...>, Adrian Bunk <bunk@...>, Mihai Don??u <mdontu@...>, <linux-kernel@...>, <malware-list@...>, Pavel Machek <pavel@...>, Arjan van de Ven <arjan@...>
but what you are missing is that when they are mounted under linux it
doesn't matter what hidden things the other OS may access, all that
matters is what Linux sees. If Linux doesn't see something it can't serve
it out to those other OSs.
those 'hidden things' would only matter if you were trying to use linux
to scan a drive and bless it for another system to then mount locally. If
we aren't trying to defend against that (and I don't hear anyone other
then you saying we should) then we don't need to worry about such things.
If we were trying to make the drive safe for all other OSs to mount
directly, then mearly seeing everything isn't enough, you would have to be
able to fully duplicate how the other OS interprets the things you are
seeing, and know all vunerabilities that arise from all possible
interpretations. I don't think that's possible (and I don't think it would
be possible even if the source for all those other OSs were available)
David Lang
--
