Date: Wed, 8 Feb 2006 08:58:25 +0100 From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: Christian Baer <christian.baer@informatik.uni-dortmund.de> Cc: freebsd-geom@freebsd.org Subject: Re: GELI -> What to encrypt? Message-ID: <20060208075825.GA11037@garage.freebsd.pl> In-Reply-To: <dsbdfg$c1t$1@nermal.rz1.convenimus.net> References: <dsbdfg$c1t$1@nermal.rz1.convenimus.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--BOKacYhQ+x31HxR3 Content-Type: text/plain; charset=iso-8859-2 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Feb 08, 2006 at 01:20:00AM +0100, Christian Baer wrote: +> Hi folks! +>=20 +> This question may seem a little strange, but don't hit me yet. :-) +>=20 +> I was just sitting here wanting to set up a new GELI-device when it +> struck me: What should I encrypt exactly. If I were to use GBDE, the +> usual concept is to encrpyt (only?) the actual partition ad2s1d. GELI +> suggests to encrypt all of ad2. I guess I could partition the +> pseudo-device then. Would I get something like ad2.gelis1d? +>=20 +> Does this have any advantages oder just encrypting the partition and if +> so how important are these? GELI, just like GBDE or any other GEOM class can work on _any_ GEOM provider (disk, slice, partition, mirror, etc.). Because this is the second such question I'm seeing, I'll probably add a note to the manual page. --=20 Pawel Jakub Dawidek http://www.wheel.pl pjd@FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! --BOKacYhQ+x31HxR3 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQFD6aShForvXbEpPzQRAnzrAJ9ym1wk+s3uejCXLGnnFS/g2/4zfACg00S5 HbUjGfDRaEUKwrux7iLDumI= =yRoi -----END PGP SIGNATURE----- --BOKacYhQ+x31HxR3--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060208075825.GA11037>