Linux-write-blocker icon indicating copy to clipboard operation
Linux-write-blocker copied to clipboard

Published 20 hours ago • verified publisher icon msuhanov

Bring the patch to upstream

Open kosli opened this issue 9 years ago • 9 comments

Dear Maxim

Have you tried to bring this patch to the upstream linux kernel? Do you know if any of the "forensic distributions" uses it?

Kind regards KoSli

kosli avatar Jul 13 '15 15:07 kosli

Hello.

Have you tried to bring this patch to the upstream linux kernel?

No.

Do you know if any of the "forensic distributions" uses it?

Grml (2014.11) and DEFT Zero (RC1).

msuhanov avatar Jul 13 '15 19:07 msuhanov

thanks for your feedback. would be nice to see it in upstream, would help the whole community :-)

just as reference: Grml is Grml-Forensic https://grml-forensic.org/ (as there is another live distri called https://grml.org/ )

kosli avatar Jul 14 '15 05:07 kosli

just as reference: Grml is Grml-Forensic https://grml-forensic.org/ (as there is another live distri called https://grml.org/ )

http://git.grml.org/?p=grml-kernel.git;a=blob;f=linux-3/debian/patches/grml/ext4-readonly.patch

msuhanov avatar Jul 14 '15 08:07 msuhanov

ups sorry, my mistake :-(

kosli avatar Jul 14 '15 09:07 kosli

Seems like a very useful patch. Why is it not part of upstream yet?

vitaly-kamluk avatar Jul 16 '17 07:07 vitaly-kamluk

Hi

Hello.

Have you tried to bring this patch to the upstream linux kernel?

No.

Do you know if any of the "forensic distributions" uses it?

Grml (2014.11) and DEFT Zero (RC1).

@ msuhanov do you know whether Sumuri Paladin or Caine Forensic Distro have their kernels patched?

klango avatar Jul 17 '20 07:07 klango

CAINE:

No. It marks block devices as read-only, but this mode isn't enforced with a kernel patch.

PALADIN:

It includes a modified version of my patch (they never included the original patch, even old versions of PALADIN have a different message string, while the logic is the same). However, the distribution uses its own userspace scripts (and they fail sometimes).

Also, at least once the patch was silently removed and then returned (without a change log entry).

msuhanov avatar Jul 21 '20 10:07 msuhanov

CAINE:

No. It marks block devices as read-only, but this mode isn't enforced with a kernel patch.

PALADIN:

It includes a modified version of my patch (they never included the original patch, even old versions of PALADIN have a different message string, while the logic is the same). However, the distribution uses its own userspace scripts (and they fail sometimes).

Also, at least once the patch was silently removed and then returned (without a change log entry).

Thanks. I actually wrote the Paladin dev team and I will post their reply here as soon as I get one. Best,

klango avatar Jul 22 '20 06:07 klango

Did you get any reply?

q2dg avatar Aug 07 '23 02:08 q2dg