⬢ DragonFlyBSD Kernel Audit
DF-2705 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
{
  "finding_id": "DF-2705",
  "title": "vop_write quota accounting skips unlinked-open files (va_nlink==0) → complete quota enforcement bypass when vfs.quota_enabled=1; concurrent-writer delta TOCTOU",
  "verdict": "untested",
  "impact": "none",
  "severity": "Low",
  "confidence": "likely",
  "reason_not_run": "Requires booting the shared guest with non-default vfs.quota_enabled=1 tunable and vquotactl limit setup to demo an accounting bypass; Low severity, disproportionate to the guest reconfiguration.",
  "reproduce": null,
  "kernel_refs": [
    "sys/kern/vfs_vopops.c:472",
    "sys/kern/vfs_vopops.c:477",
    "sys/kern/vfs_vopops.c:489",
    "sys/kern/vfs_vopops.c:495",
    "sys/kern/vfs_vopops.c:1666",
    "sys/kern/vfs_quota.c:111"
  ],
  "artifacts": ["README.md", "VERDICT.md", "verdict.json", "manifest.json"]
}