Re: Userland encrypted filesystem that root cannot access.

Horst von Brand (vonbrand@sleipnir.valparaiso.cl)
Fri, 18 Feb 2000 20:15:40 -0300

"Mike A. Harris" <mharris@meteng.on.ca> said:
> Are there any patches for the kernel, or userland solutions which
> allow a user to mount an encrypted filesystem (perhaps through
> loopback) which while mounted, root cannot read? Or is this
> concept beyond Linux currently?

> I'm thinking of the case where the superuser can admin the
> machine but due to confidentiality, the data must not be readable
> by root under any circumstance. Possible?

A determined root will be able to snoop on your password and stash the
contents of your encrypted media away for leisurly study. Not easy to do,
but not terribly hard either.

-- 
Horst von Brand                             vonbrand@sleipnir.valparaiso.cl
Casilla 9G, Viņa del Mar, Chile                               +56 32 672616




-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/