Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 Jul 2000 07:42:40 +0200
From:      Sheldon Hearn <sheldonh@uunet.co.za>
To:        Mike Silbersack <silby@silby.com>
Cc:        Joachim =?iso-8859-1?Q?Str=F6mbergson?= <watchman@ludd.luth.se>, Greg Lewis <glewis@trc.adelaide.edu.au>, freebsd-security@FreeBSD.ORG
Subject:   Re: Status of FreeBSD security work? Audit, regression and crypto swap? 
Message-ID:  <30869.963985360@axl.ops.uunet.co.za>
In-Reply-To: Your message of "Tue, 18 Jul 2000 18:44:28 EST." <Pine.BSF.4.21.0007181838570.28415-100000@achilles.silby.com> 

next in thread | previous in thread | raw e-mail | index | archive | help


On Tue, 18 Jul 2000 18:44:28 EST, Mike Silbersack wrote:

> Hence, one obtaining access to the swap file does have greater
> knowledge than they would with a crypted swap.  His paper seems well
> written, I suggest that you read it.

I read some of it.  Two things occur to me:

1) It's close to a waste of time in the absence of crypted filesystems.

2) The kind of access required to read the swap device usually implies a
   much more serious issue than a crypted swap is going to help you
   with.

That said, it _does_ provide some kind of damage control.  It's just not
as useful as people sometimes assume. :-)

Ciao,
Sheldon.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?30869.963985360>