Date: Sun, 1 Apr 2012 23:04:18 +0200 From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: Dag-Erling =?iso-8859-1?Q?Sm=F8rgrav?= <des@des.no> Cc: freebsd-security@freebsd.org, schultz@ime.usp.br Subject: Re: FreeBSD Security in Multiuser Environments Message-ID: <20120401210418.GC1346@garage.freebsd.pl> In-Reply-To: <86fwcnygys.fsf@ds4.des.no> References: <20120331140820.101653608997tekk@webmail.ime.usp.br> <86fwcnygys.fsf@ds4.des.no>
next in thread | previous in thread | raw e-mail | index | archive | help
--TakKZr9L6Hm6aLOc Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Apr 01, 2012 at 10:49:31AM +0200, Dag-Erling Sm=F8rgrav wrote: > schultz@ime.usp.br writes: > > * Encrypted the whole (except /boot) system with geli(8) > > (HMAC/SHA256 and AES-XTS). It is not as nice and much slower > > than proper filesystem-level checksumming but it is what > > FreeBSD provides (ZFS is too unstable). >=20 > ZFS is stable enough, but I'm a little confused: encryption is not > "checksumming", and ZFS provides checksums but not encryption. Also, on-disk encryption provides no additional protection against system users. It protects the data when no keys are available (for example when your turned off laptop is stolen) and in running system keys are in memory and disks are decrypted, so users that are logged in have access to decrypted content. To protect file system content from system users one should use standard UNIX permissions and ACLs. --=20 Pawel Jakub Dawidek http://www.wheelsystems.com FreeBSD committer http://www.FreeBSD.org Am I Evil? Yes, I Am! http://tupytaj.pl --TakKZr9L6Hm6aLOc Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (FreeBSD) iEYEARECAAYFAk94wtEACgkQForvXbEpPzTTzACg0qoIJZ8rXO0lPZqZGO6oVz/h oggAoPLnGeuCylkRopF7VAXSVSAe9Xsj =4goP -----END PGP SIGNATURE----- --TakKZr9L6Hm6aLOc--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120401210418.GC1346>