xfs
[Top] [All Lists]

Re: security and journaling

To: linux-xfs@xxxxxxxxxxx
Subject: Re: security and journaling
From: Ray Muno <muno@xxxxxxxxxxx>
Date: Mon, 30 Sep 2002 14:18:21 -0500
In-reply-to: <20020930151013.F24367@xxxxxxxxxxx>
References: <1033412016.12588.12.camel@xxxxxxxxxxxxxxxxxxx> <20020930185617.GA15397@xxxxxxxxxxxxx> <20020930151013.F24367@xxxxxxxxxxx>
Sender: linux-xfs-bounce@xxxxxxxxxxx
User-agent: Mutt/1.5.1i
SHRED(1)                       FSF                       SHRED(1)

NAME
       shred  -  delete  a file securely, first overwriting it to
       hide its contents

SYNOPSIS
       shred [OPTIONS] FILE [...]

...stuff deleted

       CAUTION:  Note  that  shred  relies  on  a  very important
       assumption: that the filesystem overwrites data in  place.
       This  is the traditional way to do things, but many modern
       filesystem designs do not satisfy  this  assumption.   The
       following  are  examples  of filesystems on which shred is
       not effective:

       * log-structured or journaled filesystems, such  as  those
       supplied with

              AIX and Solaris (and JFS, ReiserFS, XFS, etc.)

---------------------
On Mon, Sep 30, 2002 at 03:10:13PM -0400, Scott McDermott wrote:
> Chris Wedgwood on Mon 30/09 11:56 -0700:
> > That said, if you are *really* paranoid deleting and over-writing the
> > data doesn't suffice unless done carefully and eve nthen there are
> > caveats.
> 
> Just use shred(1)...it's from fileutils so it should be on any GNU box.
> You also have to worry about VM pages being written to swap unencrypted.
> Encrypted loopback is probably better for this application.
> 
=============================================================================
 
 Ray Muno                           http://www.aem.umn.edu/people/staff/muno
 University of Minnesota                          e-mail:   muno@xxxxxxxxxxx
 Aerospace Engineering and Mechanics               Phone:     (612) 625-9531
 110 Union St. S.E.                                  FAX:     (612) 626-1558
 Minneapolis, Mn 55455                  

=============================================================================


<Prev in Thread] Current Thread [Next in Thread>