LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-21-2009, 09:48 AM   #1
Ulysses_
Senior Member
 
Registered: Jul 2009
Posts: 1,303

Rep: Reputation: 57
Access USB drive without executing boot records


According to the following article:

"Even non-bootable disks can spread a boot sector infection when they are accessed"

Is it possible to access the data in a USB drive without executing the machine code in its boot records, which may be infected?

What if we have a rule that all our external drives are always partitioned with just one partition? Then there's no need for boot machine code, is there?
 
Old 11-21-2009, 09:54 AM   #2
Web31337
Member
 
Registered: Sep 2009
Location: Russia
Distribution: Gentoo, LFS
Posts: 399
Blog Entries: 71

Rep: Reputation: 65
never thought linux kernel executes something from USB/etc "on connect"...
--
upd: i also never thought some executable code can be stored in boot records...

Last edited by Web31337; 11-21-2009 at 10:00 AM. Reason: i really never thought...
 
Old 11-21-2009, 12:53 PM   #3
Ulysses_
Senior Member
 
Registered: Jul 2009
Posts: 1,303

Original Poster
Rep: Reputation: 57
Quote:
Originally Posted by Web31337 View Post
never thought linux kernel executes something from USB/etc "on connect"...
--
upd: i also never thought some executable code can be stored in boot records...
It's the terrible way they designed it, back in the 80's the bios did not know anything about partitions and neither does it now, the bios or its substitute just executes the machine code in the master boot record that implements the partitioning functionality, which may therefore not be the standard of up to 4 partitions (3 primaries, one extended) but something else completely different, or even a virus.

Boot records in partitions also contain executable machine code, useful if they are bootable. Hopefully this code does not get executed in our case a USB drive being hotplugged. But it may well be, cause otherwise how can boot sector viruses exist.

Last edited by Ulysses_; 11-21-2009 at 12:57 PM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
accessing USB drive in Redhat 9 and then creating USB boot disk Fond_of_Opensource Linux - Hardware 1 04-15-2007 07:43 AM
using GRUB 1.5 with boot on sata-drive and system on usb drive(ipod photo) Scorp-D Linux - Laptop and Netbook 1 03-16-2007 02:34 AM
Boot from USB external drive, from laptop without USB boot support. darirod Linux - Newbie 2 12-19-2006 10:00 AM
Can't access external USB drive DavidNW Linux - Newbie 2 07-17-2006 11:53 AM
Can not access mounted USB drive Honkeychops Mandriva 5 03-06-2006 12:59 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 04:52 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration