LinuxQuestions.org
Support LQ: Use code LQCO20 and save 20% on CrossOver Office
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
LinkBack Search this Thread
Old 11-21-2009, 10:48 AM   #1
Ulysses_
Member
 
Registered: Jul 2009
Posts: 373

Rep: Reputation: 39
Access USB drive without executing boot records


According to the following article:

"Even non-bootable disks can spread a boot sector infection when they are accessed"

Is it possible to access the data in a USB drive without executing the machine code in its boot records, which may be infected?

What if we have a rule that all our external drives are always partitioned with just one partition? Then there's no need for boot machine code, is there?
 
Old 11-21-2009, 10:54 AM   #2
Web31337
Member
 
Registered: Sep 2009
Location: Russia
Distribution: Gentoo, LFS
Posts: 396
Blog Entries: 71

Rep: Reputation: 65
never thought linux kernel executes something from USB/etc "on connect"...
--
upd: i also never thought some executable code can be stored in boot records...

Last edited by Web31337; 11-21-2009 at 11:00 AM. Reason: i really never thought...
 
Old 11-21-2009, 01:53 PM   #3
Ulysses_
Member
 
Registered: Jul 2009
Posts: 373

Original Poster
Rep: Reputation: 39
Quote:
Originally Posted by Web31337 View Post
never thought linux kernel executes something from USB/etc "on connect"...
--
upd: i also never thought some executable code can be stored in boot records...
It's the terrible way they designed it, back in the 80's the bios did not know anything about partitions and neither does it now, the bios or its substitute just executes the machine code in the master boot record that implements the partitioning functionality, which may therefore not be the standard of up to 4 partitions (3 primaries, one extended) but something else completely different, or even a virus.

Boot records in partitions also contain executable machine code, useful if they are bootable. Hopefully this code does not get executed in our case a USB drive being hotplugged. But it may well be, cause otherwise how can boot sector viruses exist.

Last edited by Ulysses_; 11-21-2009 at 01:57 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
accessing USB drive in Redhat 9 and then creating USB boot disk Fond_of_Opensource Linux - Hardware 1 04-15-2007 08:43 AM
using GRUB 1.5 with boot on sata-drive and system on usb drive(ipod photo) Scorp-D Linux - Laptop and Netbook 1 03-16-2007 03:34 AM
Boot from USB external drive, from laptop without USB boot support. darirod Linux - Newbie 2 12-19-2006 11:00 AM
Can't access external USB drive DavidNW Linux - Newbie 2 07-17-2006 12:53 PM
Can not access mounted USB drive Honkeychops Mandriva 5 03-06-2006 01:59 PM


All times are GMT -5. The time now is 01:53 PM.

Main Menu
 
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: @linuxquestions
Open Source Consulting | Domain Registration