Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Nov 2002 18:54:33 +0100
From:      Poul-Henning Kamp <phk@critter.freebsd.dk>
To:        "kai ouyang" <oykai@msn.com>
Cc:        Current@FreeBSD.org
Subject:   Re: About gbde questions 
Message-ID:  <1519.1037901273@critter.freebsd.dk>
In-Reply-To: Your message of "Thu, 21 Nov 2002 16:57:02 %2B0800." <F28CqXLccxe64CuBZhh0000e5fa@hotmail.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
In message <F28CqXLccxe64CuBZhh0000e5fa@hotmail.com>, "kai ouyang" writes:
>Hi,everybody,
>  I have some puzzles on the 'gbde' function.
>  I saw the gbde(4), I do not understand the 'cold' true meaning. My point 
>is that if the disk were stealed by somebody, he could not see anything in 
>the disk unless he knows the "pass-phrase". right?

Right.  By "cold disk" we mean that the pass-phrase and key-material
is not available.  A laptop which is only suspended does _not_ meet
this criteria.

>  In the first barrier, the manual said that "metadata" is necessary to 
>locate the lock-sector, I want to know how we get "metadata".

It is generated by gbde init.  If you don't specify a location it will
be stored in the first sector.

>The 'da1s1f' partition exists, but I do not mount it. I first try to test 
>'da0s1f', but the box info:"gbde: /dev/da0s1f: Device busy".

Yes, you want to newfs and mount /dev/da0s1f.bde

I think the "-l" is a mistake in the usage, it should be "-L".

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1519.1037901273>