From owner-freebsd-security@FreeBSD.ORG  Tue May 22 13:25:38 2012
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id F173E106564A
	for <freebsd-security@freebsd.org>;
	Tue, 22 May 2012 13:25:38 +0000 (UTC) (envelope-from feld@feld.me)
Received: from feld.me (unknown [IPv6:2607:f4e0:100:300::2])
	by mx1.freebsd.org (Postfix) with ESMTP id B7B788FC0A
	for <freebsd-security@freebsd.org>;
	Tue, 22 May 2012 13:25:38 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=feld.me;
	s=blargle; 
	h=In-Reply-To:Message-Id:From:Mime-Version:Date:References:Subject:To:Content-Type;
	bh=dkKed3svjNc9sypH/vOOAAVbrJwsGMQpl7eqgFVzXuQ=; 
	b=oQO1ei4oOTrxrxXuCsy7rjW2UuK2CDnrQ+ntV4p9qhypT4nfjtTzuHm1K0wvB2htUgyc44Rg24kptLhFcbdjBZBc5WVT61JISADPV/6+j0kGgs4IBFTr4ih7HFgpdi+9;
Received: from localhost ([127.0.0.1] helo=mwi1.coffeenet.org)
	by feld.me with esmtp (Exim 4.77 (FreeBSD))
	(envelope-from <feld@feld.me>) id 1SWp5f-000Ir5-DB
	for freebsd-security@freebsd.org; Tue, 22 May 2012 08:25:38 -0500
Received: from feld@feld.me by mwi1.coffeenet.org (Archiveopteryx 3.1.4)
	with esmtpa id 1337693125-3288-3287/5/19; Tue, 22 May 2012 13:25:25
	+0000
Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes
To: freebsd-security@freebsd.org
References: <CAL5m1Bv3MBXTpMPdQNsznfE3g3Fi7xmed08OFh2GfLE2wwqZJw@mail.gmail.com>
Date: Tue, 22 May 2012 08:25:25 -0500
Mime-Version: 1.0
From: Mark Felder <feld@feld.me>
Message-Id: <op.wepownyi34t2sn@tech304>
In-Reply-To: <CAL5m1Bv3MBXTpMPdQNsznfE3g3Fi7xmed08OFh2GfLE2wwqZJw@mail.gmail.com>
User-Agent: Opera Mail/11.64 (FreeBSD)
X-SA-Score: -1.5
Subject: Re: Lock FreeBSD partitions
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 22 May 2012 13:25:39 -0000

On Tue, 22 May 2012 02:06:25 -0500, mahdieh salamat  
<mahdieh.salamat@gmail.com> wrote:

> Hi all. I don't know I should ask my question here or not,I want to lock  
> my
> partitons by geli or gbde, but I want that after boot users don't force  
> to
> enter the passphrase. In other wise the partitions are locked but seems
> that they aren't lock. I need it for security that if any one try to  
> mount
> partitions by CD or flash can't do it.
> Thanks

Are you saying you want them encrypted but automatically decrypted during  
the boot process, but if someone tries to load the system via a LiveCD or  
other method they wouldn't be able to mount the partitions without the  
passphrase?