On 06/05/2020 00:37, Eric Biggers wrote: > They replace the current content of the block device with the content at an > earlier time. We could mitigate this (at a later time probably), by writing the super block generation into some trusted store like a TPM. But I think this would need general support from the kernel. But thanks for showing me this attack, I'll document that this attack will still work.
