Re: [Sidrops] trying to limit RP processing variability

[Martin Hoffmann <[e-mail]>]

Stephen Kent wrote:
>
> > rsync has a flag (--delete) where it literally syncs, ie. not only
> > fetches new/updated objects but also removes the local ones that no
> > longer exist remotely. (Either this, or some other processes have
> > to do cleanup, otherwise the local copy accumulates objects
> > eternally.)  
> 
> I forgot about the --delete flag. But, if one chooses to make use of
> the flag, it requires caution. if an attacker deleted files and an RP 
> removed instances of those files from the local cache, this is an
> easy DoS attack. One would have to see if there is a current manifest
> and if it lists files that have been deleted from the PP. Only if
> there is a current manifest, and the deleted files are also not
> present in the manifest, would it be safe to delete those files.
> 
> If one relies on examination of a current manifest to trigger
> deletion of cached files this problem would be avoided, and thus
> those files would not accumulate forever. maybe that's why I was not
> thinking about the flag.

An attacker who can delete files can as easily replace them with
something else with the same result. So I am not sure the added code
complexity is worth it.

Kind regards,
Martin