lkml.org 
[lkml]   [2000]   [Feb]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
SubjectRe: Userland encrypted filesystem that root cannot access.
From
** On Feb 19, Horst von Brand scribbled:
> "Mike A. Harris" <mharris@meteng.on.ca> said:
> > Are there any patches for the kernel, or userland solutions which
> > allow a user to mount an encrypted filesystem (perhaps through
> > loopback) which while mounted, root cannot read? Or is this
> > concept beyond Linux currently?
>
> > I'm thinking of the case where the superuser can admin the
> > machine but due to confidentiality, the data must not be readable
> > by root under any circumstance. Possible?
>
> A determined root will be able to snoop on your password and stash the
> contents of your encrypted media away for leisurly study. Not easy to do,
> but not terribly hard either.
If the data is sent encrypted to the remote client using ssh transmission,
then even if root snoops the ssh encryption key, he won't be able to
actyallu read the data -the data will be encrypted on the client's machine.

marek
[unhandled content-type:application/pgp-signature]
\
 
 \ /
  Last update: 2005-03-22 13:56    [W:0.197 / U:1.236 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site