Date: Sat, 25 Mar 2006 21:10:11 -0600 From: Drew <cotharyus@gmail.com> To: questions@freebsd.org Subject: File/directory encryption - recommendations Message-ID: <715841970603251910o4aadcc6ahba49bdd13ed11018@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
Hello, I am looking for a way to encrypt a directory and several subdirctories. I've been looking into how best to do this, but I'm wading through quite a lot of information, and thought this might be a good time to look for actua= l experience with this, since there seem to be quite a few choices. First let me go into a little detail of exactly what I'm requiring. Basicly, the company I work for uses a jabber server for quick and dirty internal communications. Because of my possition, some of my communications involve data that is considered sensitive within the company. To protect this, currently myself and others that require this type of security are using Gaim-encryption modules. Of course, we like to keep records of our conversations as well, which brings us to the log files for Gaim. Idealy, n= o one but me would ever have access to my workstation. But, there's always that outside chance. In order to further protect things that shouldn't be i= n other peoples hands, I would like to encrypt these log directories. It woul= d be best if it could be done on the fly (cfs?) in a way that would allow myself (and my copy of Gaim) to access, create, write, read, etc existing and new files with as little hassle to myself as possible. That said, reducing the hassle would appear to reduce security as well (anything accessing it requiring a key might be going a bit far, but I am asking for examples and suggestions), so maybe there's a middle ground. Certainly if anyone managed to log in or connect to the machine somehow with anything bu= t my user ID I would want any data contained in those files to appear as nonsense. Perferably, I would like that to happen if you try to access the files without a key even logged in as me, barring some form of once-per-session key entry. So. Fire away. I'm all ears. Thanks in advance. Drew
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?715841970603251910o4aadcc6ahba49bdd13ed11018>