Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 20 May 1999 23:40:42 +0400 (MSD)
From:      "Ilmar S. Habibulin" <ilmar@ints.ru>
To:        James Wyatt <jwyatt@RWSystems.net>
Cc:        posix1e@cyrus.watson.org, freebsd-security@freebsd.org
Subject:   Re: secure deletion
Message-ID:  <Pine.BSF.4.05.9905202337090.2295-100000@ws-ilmar.ints.ru>
In-Reply-To: <Pine.BSF.4.05.9905201144130.18069-100000@kasie.rwsystems.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 20 May 1999, James Wyatt wrote:

> My first thought was, what a great idea for /etc/master.passwd which gets
> flushed every time a user updates their password. Good idea for any file
> containing decrypted data.
> 
> My second thought of the impact of support for wiping in the kernel... If
> I really wanted to slow down a server I didn't like, setting this flag for
> files in /tmp and CGI-interim results piping and caching sounds like it
> could quietly drive disk IO up quite a bit. - Jy@

My thoughts are about an option in kernel config file (WIPEINFO?), which
will enable wiping support. To wipe the file before deletion you should
set some wipe flag on this file. And i suppose that flag could be set only
at the apps' wheel. ;-) I don't see any inheritance mechanism for this
flag.




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9905202337090.2295-100000>