Date: Sun, 22 Jan 2006 15:08:16 -0800 From: Brooks Davis <brooks@one-eyed-alien.net> To: Norberto Meijome <freebsd@meijome.net> Cc: Freebsd-security@freebsd.org, FreeBSD Questions <freebsd-questions@freebsd.org> Subject: Re: Encrypted volume - how? Message-ID: <20060122230816.GC7703@odin.ac.hmc.edu> In-Reply-To: <43D409B8.6070704@meijome.net> References: <43D409B8.6070704@meijome.net>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Mon, Jan 23, 2006 at 09:39:52AM +1100, Norberto Meijome wrote: > Hi all, > I'm looking for a way to recreate the functionality of PGP Disk (under > Win32). Basically, create an encrypted file, which contains a filesystem > which can then be mounted in any mount point. > > I know I can use GELI in FreeBSD 6 - as I understand, it performs the > encryption at the partition level (the whole partition is encrypted). > I'd like to be able to simply unmount my 'secure volume', and be able to > back it up as a whole, or move it to another computer without having to > repartition the destination. I think GELI wouldn't be good for this. GELI or GBDE are probably what you're looking for, you just need to use mdconfig to create a vnode (file) backed disk image which you will encrypt and then create a file system on. -- Brooks -- Any statement of the form "X is the one, true Y" is FALSE. PGP fingerprint 655D 519C 26A7 82E7 2529 9BF0 5D8E 8BE9 F238 1AD4 [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFD1BBgXY6L6fI4GtQRArGMAKCtP+SpBFxdbE4ni+oj+qnMzAqpyACgwGuF wRKFhU7QBp9NOqnwYv0+vAc= =TjUx -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060122230816.GC7703>