]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/journal/journal-file.c
journal-file: when individual hash chains grow too large, rotate
authorLennart Poettering <lennart@poettering.net>
Mon, 1 Jun 2020 17:40:30 +0000 (19:40 +0200)
committerLennart Poettering <lennart@poettering.net>
Thu, 25 Jun 2020 13:02:00 +0000 (15:02 +0200)
commit0dbe57ee86a5311d8a6c099f76ba95b73872439b
tree3525da22453d1d4605e71d2c8e02950eac96d498
parent4ce534f4cd950cb22abacdfd4d967b41b890a706
journal-file: when individual hash chains grow too large, rotate

Even with the new keyed hash table journal feature: if an attacker
manages to get access to the journal file id it could synthesize records
that result in hash collisions. Let's rotate automatically when we
notice that, so that a new journal file ID is generated, our performance
is restored and the attacker has to guess a new file ID before being
able to trigger the issue again.

That said, untrusted peers should never get access to journal files in
the first case...
src/journal/journal-def.h
src/journal/journal-file.c