Re: encrypted filesystem
SiD` spilled the following:
> Hi,
>
> as a newbie, I would like to know if there is any way to configure a
> server running linux in which I can use strong-encryption (like PGP or
> something which is VERY hard to be violeted (like PGPdisk)) which can be
> auto-mounted at startup. I wish to be able to access the encrypted data
> ONLY with the password or by programs with the privileges to read those
> datas. (like the NTFS encryption, which I don't know how much secure is..)
>
> Final question: the speed of this system, would be ok or it would be
> compromised?
>
AIR encrypted loopback filesystems require a pass-phrase in order to mount
(i.e. it is unlocked when you mount it - not something you would want to
happen un-attended).
Inidividual files can be encrypted using pgp or ssl, and the unix filesystem
and security model can be applied to most cases without resorting to ACLs
(I HATE ACLS!). If allowing un-attended reboots is a must then I suspect
this maybe more apposite to your application than an entire encrypted
filesystem.
Regarding speed - an encrypted filesystem will be slower if you do it in
software - whether the effect will be significant / noticable....we'd need
to know a lot more about the application / hardware / i/o traffic to hazard
a guess.
What NTFS encryption?
C.
|