From owner-freebsd-questions@FreeBSD.ORG  Sat Oct 30 13:12:54 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3D63516A4CE
	for <freebsd-questions@freebsd.org>;
	Sat, 30 Oct 2004 13:12:54 +0000 (GMT)
Received: from msr31.hinet.net (msr31.hinet.net [168.95.4.131])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8C51143D45
	for <freebsd-questions@freebsd.org>;
	Sat, 30 Oct 2004 13:12:53 +0000 (GMT)
	(envelope-from y2kbug@ms25.hinet.net)
Received: from sonic (61-225-170-98.dynamic.hinet.net [61.225.170.98])
	by msr31.hinet.net (8.9.3/8.9.3) with SMTP id VAA29080
	for <freebsd-questions@freebsd.org>;
	Sat, 30 Oct 2004 21:12:51 +0800 (CST)
Date: Sat, 30 Oct 2004 21:12:19 +0800
From: Robert Storey <y2kbug@ms25.hinet.net>
To: freebsd-questions@freebsd.org
Message-Id: <20041030211219.00b2738d.y2kbug@ms25.hinet.net>
X-Mailer: Sylpheed version 0.9.99 (GTK+ 1.2.10; i386-pc-linux-gnu)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Subject: swap partition encryption
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 30 Oct 2004 13:12:54 -0000

Dear All,

I've succeeded in creating an encrypted partition using gbde. I followed
the directions in the FBSD Handbook which, among other things, states:

   Unlike cumbersome encryption methods that encrypt only
   individual files, gbde transparently encrypts entire file systems.
   No cleartext ever touches the hard drive's platter.

But I wonder if that last sentence is true. What about the swap
partition? Is it simply bypassed, or does one need to do something to
create an encrypted swap partition?

regards,
Robert