While mounted? No. Root has access to the entire machine and
everything running on it. While unmounted? Easy, since the user
would have to enter the key to unlock the volume.
Using capabilities, one could set up a restricted "sort-of-root"
account for which it may be feasible, but for the "real" root who can
install kernel modules and read /dev/mem, /dev/kmem and /proc/kcore
there is no hope.
-hpa
-- <hpa@transmeta.com> at work, <hpa@zytor.com> in private! "Unix gives you enough rope to shoot yourself in the foot."- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/