[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: disk data protection
- To: misc_(_at_)_openbsd_(_dot_)_org
- Subject: Re: disk data protection
- From: Ben Goren <ben_(_at_)_trumpetpower_(_dot_)_com>
- Date: Thu, 4 Nov 2004 10:53:17 -0700
On 2004 Nov 4, at 10:31 AM, Steve Shockley wrote:
> Dimitri Georganas wrote:
>> Is there a way to protect a disk with sensitive data in a way that it
>> will only work and will only be readable if installed on i.e. System
>> A? So if the disk is stolen and installed in a System B, it shouldn't
>> boot and if mounted like mount /dev/wd1a /mnt/ the contents shouldn't
>> be readable.
>
> man atactl
BZZZZZT! Wrong answer.
This is the classic case for data encryption, particularly the kind
offered by vnd(4).
There're lots of reasons not to use vnd devices, but Mr. Geoganas
describes a situation where those reasons are outweighed by his
concerns.
Cheers,
b&
[demime 0.98d removed an attachment of type application/pgp-signature which had a name of PGP.sig]
Visit your host, monkey.org