On 10/14/07, Michael Halcrow <[EMAIL PROTECTED]> wrote:
> > Are you thinking users will execute libraries from eCrypfs?
>
> Absolutely. I know of users who are mounting their entire root under
> eCryptfs.

This is strange!
loop-aes should be much better solution.
My installations use the following:
http://wiki.tuxonice.net/EncryptedSwapAndRoot

In fact my test configuration uses eCryptfs over loop-aes over ext3... :)

> > > 2. Extra context switching between kernel and userspace on every page
> > > read/write syscall.
> >
> > But decryption is slow anyway... :)
>
> Not always. Architectures like the s390 with CPACF instructions can do
> the symmetric encryption very quickly; the extra constant context
> switching would result in a significant performance degredation.

OK. Someday someone will have to take care of this one too...

Best Regards,
Alon Bar-Lev.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
eCryptfs-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ecryptfs-devel

Reply via email to