LVM2 broken? (File descryptor leaked on pv/vg/lv creation)

Amanda S · 2014-05-28 07:24:58

This is the output from LVM2 when I create Logical Volumes, Volume Groups and Physical Volumes

File descryptor 6 (/run/systemd/sessions/c1.ref) leaked on pvcreate invocation. Parent PID 334: -zsh

I hope this isn't a real security problem. I only get this message when installing Arch for the 1st time since I don't resize my partitions. I use the following partition setup:

- 1 GiB for /boot, unencrypted
- 931.5 GiB for LVM (encrypted with LUKS), in which:
*40GiB for /
* 8 GiB for /swap
* 862.5 GiB for /home

I'm using the current ISO image from 5.1.2014.

An old quote from the LVM2's Launchpad page:

Note - leaked message is basically harmless - it only reports that it was executed from environment which left more opened descriptors than stdin/out/err - this may present security problem - that's why lvm tool report this issue. So effectively it means the problem is in the executing shelll which leaves descriptors opened while calling lvm.

http://unix.stackexchange.com/questions … escriptors

https://bugs.launchpad.net/ubuntu/+sour … bug/591823

Amanda S · 2014-05-29 02:38:21

Since nobody responded, I'll use an older ISO image I have which doesn't have this bug. I can't afford taking this risk.

headkase · 2014-05-29 02:49:53

Amarildo wrote:

I can't afford taking this risk.

http://xkcd.com/538/

Amanda S · 2014-05-29 03:08:09

headkase wrote:

Amarildo wrote:
I can't afford taking this risk.
http://xkcd.com/538/

Yeah, that would never work on me.
Looks like the author(s?) of xkcd sometimes assumes he knows every possibility or that his theory applies in all cases, like the one you linked, or such as that "correcthorsebatterystaple" talk on passwords.

https://bbs.archlinux.org/viewtopic.php … 1#p1375311

About the password being extracted with the 5$ wrench: Well, that's the main point. If you only want to hide info from your relatives and friends, not much work is required. Here in Brazil, for example, I can count with my fingers how many people protect their data. Most of them think a user password on Windows will protect their data. It will, to some extent, but what if the attacker knows how to use a Linux LiveCD? They can then use software encryption (most are free) and use simple passwords to protect whatever they're trying to protect.
It all comes to how valuable is your data. If you're a Banker or a very important Businessman, then strong encryption is the least requirement. If you're a regular user then a simple truecrypt volume should suffice.

Last edited by Amanda S (2014-05-29 03:23:28)

Arch Linux

#1 2014-05-28 07:24:58

LVM2 broken? (File descryptor leaked on pv/vg/lv creation)

#2 2014-05-29 02:38:21

Re: LVM2 broken? (File descryptor leaked on pv/vg/lv creation)

#3 2014-05-29 02:49:53

Re: LVM2 broken? (File descryptor leaked on pv/vg/lv creation)

#4 2014-05-29 03:08:09

Re: LVM2 broken? (File descryptor leaked on pv/vg/lv creation)

Board footer