lkml.org 
[lkml]   [2000]   [Feb]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date21 Feb 2000 13:23:00 +0100
From(A. Ott)
SubjectRe: Userland encrypted filesystem that root cannot access.
********* ***************** ********** ****  *****   ***** ************
To subject Re: Userland encrypted filesystem that root cannot access.
mharris@meteng.on.ca (Mike A. Harris) wrote:
********** ******************** ****** ******** ******* *************
> On Fri, 18 Feb 2000, Alexander Viro wrote:
>
> >> Are there any patches for the kernel, or userland solutions which
> >> allow a user to mount an encrypted filesystem (perhaps through
> >> loopback) which while mounted, root cannot read? Or is this
> >> concept beyond Linux currently?
> >>
> >> I'm thinking of the case where the superuser can admin the
> >> machine but due to confidentiality, the data must not be readable
> >> by root under any circumstance. Possible?
> >
> >Don't be silly. Hint: su lusername. God, root - what's the difference?
>
> Hehe. Well, yes... That is what I assumed - that it is
> currently NOT possible. It is something that SHOULD be possible
> sometime in the future though. There are systems out there, in
> which for military reasons, or perhaps other top secret reasons
> that files need to remain top secret and not visible to any
> system admin person. I'm thinking here of A or B class
> security.. which is likely a long way off.. Oh well, it was
> worth asking anyways..

There are already several Linux solutions for real access control, e.g.
RSBAC (www.rsbac.de).

Amon.

--
Please remove second ao for E-Mail reply - no spam please!
## CrossPoint v3.11 ##

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:56    [from the cache]
©2003-2010