Re: encrypted filesystem

Thor Lancelot Simon <[email protected]> Mon, 1 Sep 2003 02:01:50 -0400

Newsgroups	gmane.os.netbsd.devel.general
Message-ID	<[email protected]>

On Mon, Sep 01, 2003 at 01:29:52AM -0400, Robert Connolly wrote:
>
> CGD isn't quite what Im looking for. Files are not protected from root, or 
> anyone else while its mounted. CGD is fine for swap though.

I hope you at least understand that, given the Unix security model,
anything that purports to "protect files from root" while the filesystem
is mounted is, uh, well, let's just say that the emperor has no clothes.

As for protection "from anyone else" while the filesystem is mounted, if
you don't trust the kernel to do something as simple as enforce permissions
in the filesystem, why do you trust it to do something sophisticated like
manage encryption keys?

Thor