[nycbug-talk] encrypt home space

G T unixenigma
Fri Dec 10 13:07:36 EST 2004


One more thing I forgot to mention.
In OpenBSD I did the following to encrypt swap fs

from console you can write:
# sysctl -w vm.swapencrypt.enable=1

Or edit your /etc/sysctl.conf to enable this feature 
permanently.

Thanks
GT

--- michael <lists at genoverly.net> wrote:

> Talk,
> 
> I wanted to create an encrypted home and swap space
> on my laptop.  In
> case it is ever lifted... you know.   I have FreeBSD
> on my laptop.  
> 
> I started by revisiting Roland Dowdeswell: NetBSD
> crypto disk.
> http://nycbug.org/index.php?NAV=Home&SUBM=20 
> 
> I found cfs in ports:
>
http://www.freebsd.org/cgi/url.cgi?ports/security/cfs/pkg-descr
> 
> then checked Dan's diary and found an article from
> many years ago:
> http://www.freebsddiary.org/encrypted-fs.php
> 
> There is also an article for little usb thumb
> drives:
> http://bsdnews.org/03/cryptusb.php
> 
> The Handbook has a chapter on gbde:
>
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/disks-encrypting.html
> "Unlike cumbersome encryption methods that encrypt
> only individual
> files, gbde transparently encrypts entire file
> systems. No cleartext
> ever touches the hard drive's platter."
> 
> I really liked Roland's talk.  I may be wrong but,
> cgd seems NetBSD
> specific. Because of that, I'm leaning toward gbde.
> Has anyone tried
> something similar to what I'm talking about? 
> 
> Michael
> 
> -- 
> ---
> _______________________________________________
> % NYC*BUG talk mailing list
> http://lists.nycbug.org/mailman/listinfo/talk
> %Be sure to check out our Jobs and NYCBUG-announce
> lists
> %We meet the first Wednesday of the month
> 



		
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - Helps protect you from nasty viruses. 
http://promotions.yahoo.com/new_mail




More information about the talk mailing list