Re: secure use of cryptsetup by non-root

On 08/08/2021 20:43, Peter Grandi wrote:
...
>> (It is tricky with only cryptsetup, but it is possible through
>> using null cipher with block device.)
> 
> That could be disabled by recompiling the kernel, not that it is
> essential given the above.

Then just setup an encrypted device with a known key and use
userspace app to reverse it by running encrypt/decrypt operation.

There are more tricks, it is not secure.

Milan
_______________________________________________
dm-crypt mailing list -- [email protected]
To unsubscribe send an email to [email protected]