Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 10 Oct 2007 20:18:38 +0200
From:      Fabian Keil <freebsd-listen@fabiankeil.de>
To:        freebsd-questions@freebsd.org
Subject:   Re: Booting a GELI encrypted hard disk
Message-ID:  <20071010201838.23fa7c2f@fabiankeil.de>
In-Reply-To: <20071010175349.GB9770@slackbox.xs4all.nl>
References:  <470CCDE2.9090603@ibctech.ca> <20071010175349.GB9770@slackbox.xs4all.nl>

next in thread | previous in thread | raw e-mail | index | archive | help
--Sig_/rAVx8p_nkgxpM4BdO3bgAP0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

Roland Smith <rsmith@xs4all.nl> wrote:

> On Wed, Oct 10, 2007 at 09:04:34AM -0400, Steve Bertrand wrote:

> > I am voraciously attempting to get a FreeBSD system to boot from a GELI
> > encrypted hard disk, but am having problems.
>=20
> You don't need to encrypt the whole harddisk. You can encrypt separate
> slices. There is no need to encrypt stuff like / or /usr; what is there
> that needs to be kept secret?

Encryption isn't only useful for private data,
it also reduces the risk of third parties replacing
your binaries with Trojans while your away.

Fabian

--Sig_/rAVx8p_nkgxpM4BdO3bgAP0
Content-Type: application/pgp-signature; name=signature.asc
Content-Disposition: attachment; filename=signature.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (FreeBSD)

iD8DBQFHDRd/BYqIVf93VJ0RAorQAKCKy+/fDdLZs7OfpI6efzr2hUuvEACfTW/w
WXB5hziCiBO/D/CoBX8TcCQ=
=WofB
-----END PGP SIGNATURE-----

--Sig_/rAVx8p_nkgxpM4BdO3bgAP0--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20071010201838.23fa7c2f>