tech-security archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: cgd and remote keys




To: Erik Berls <cyber%netbsd.org@localhost>

Subject: Re: cgd and remote keys

From: Curt Sampson <cjs%starling-software.com@localhost>

Date: Sat, 12 Jan 2008 13:35:12 +0900


On 2008-01-05 12:13 -0800 (Sat), Erik Berls wrote:

> You really have to work to balance the multiple encrypted volumes.  I
> don't think for a minute that the courts are going to believe that
> your 4G volume only contains 1 8k text file.  Especially in front of a
> jury.  [;-)

On the other hand, they may well believe that the 450 GB volume contains
almost nothing if that happens to be the rest of the disk after the
standard set of partitions.

(As an example; on almost all of my systems, I have a standard set of
partitions: root, swap, usr, var, home, u. The first four are almost
invariably about 8-9 GB in size. home ranges from 4-16 GB. u is the rest
of the disk. On older systems, that may be 45 GB; on newer, 450+ GB. I
encrypt only home and u, and if I encrypt, always encrypt both.)

cjs
-- 
Curt Sampson       <cjs%starling-software.com@localhost>        +81 90 7737 
2974   
Mobile sites and software consulting: http://www.starling-software.com



References:

Re: cgd and remote keys
From: Cem Kayali

Re: cgd and remote keys
From: Martin J. Laubach

Re: cgd and remote keys
From: Gavan Fantom

Re: cgd and remote keys
From: Erik Berls




Prev by Date: Re: enforcing RLIMIT_NPROC in setuid() ?

Next by Date: Re: cgd and remote keys

Previous by Thread: Re: cgd and remote keys

Next by Thread: Re: cgd and remote keys

Indexes:

reverse Date

reverse Thread

Old Index



Home | Main Index | Thread Index | Old Index