Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 11 Apr 2012 11:34:59 +0200
From:      Pawel Jakub Dawidek <pjd@FreeBSD.org>
To:        Fa bio <fa-h-2007@hotmail.com>
Cc:        freebsd-geom@freebsd.org
Subject:   Re: Automatic Geli?
Message-ID:  <20120411093458.GC1319@garage.freebsd.pl>
In-Reply-To: <COL115-W4014B9D06091DFE170C09BA5370@phx.gbl>
References:  <COL115-W4014B9D06091DFE170C09BA5370@phx.gbl>

next in thread | previous in thread | raw e-mail | index | archive | help

--8X7/QrJGcKSMr1RN
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Apr 09, 2012 at 06:34:10PM +0000, Fa bio wrote:
> Is it possible to recompile geli/kernel to automatically enter with passw=
ord and/or key? I=B4ll explain with an example:
>=20
> If you see a cache system called SpeedR (http://www.speedr.com.br/?locale=
=3Den), in their site you can download the ISO and burn it to a CD (http://=
www.speedr.com.br/rc/speedr-0...rc18.2-x64.iso)
>=20
> It=B4s very interesting, because all partitions are encrypted with Geli,=
=20
> but there is no passphrase to enter at boot time or key directions in loa=
der.conf file.

If they distribute encrypted image that actually works, it means they
distribute the key along with the image. As was already noted this
serves no purpose, as you can extract the key from the image and decrypt
the whole thing on your own.

--=20
Pawel Jakub Dawidek                       http://www.wheelsystems.com
FreeBSD committer                         http://www.FreeBSD.org
Am I Evil? Yes, I Am!                     http://tupytaj.pl

--8X7/QrJGcKSMr1RN
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)

iEYEARECAAYFAk+FUEIACgkQForvXbEpPzSbsgCguqs5FkCakPLv+995tJLIcghn
iCIAn3r1oLb2yLayKUvPZ4TANcQHUFUp
=X3Lp
-----END PGP SIGNATURE-----

--8X7/QrJGcKSMr1RN--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120411093458.GC1319>