Am 14.01.2013 03:11, schrieb Adam Carter:
> shred and dd available, but not srm etc
> 
> I want to remove the user account info before the device is returned,
> but dont want to cripple the device. Filesystem is ext3 with default
> mount options, which implies its mounted with the default data=ordered,
> and according to the docs "In both the data=ordered (default) and
> data=writeback modes, shred works as usual"
> 
> Would these steps be effective?
> - set root pw back to installation default
> - manually create copies of passwd and shadow (named passwd2 shadow2,
> NOT by copying files then deleting extra lines) containing only the
> default installation entries
> - shred /etc/passwd /etc/shadow

Don't forget the backup files created by some tools. For example
"/etc/passwd-"

> - mv passwd2 and shadow2 to passwd and shadow
> - dd if=/dev/zero of=/blah (to blank all spare blocks on fs, dd will
> bail out once full. Will it miss info from non-fully allocated blocks?)

Don't forget to do this as root to get the last 5%.

If you want to be sure, you can try several overwrite cycles, for
example with binary ones. The easiest way I know to generate such a
sequence is `tr '\000' '\377' < /dev/zero | dd of=...`. Or you can just
allocate /blah and then `shred` it.

> - rm /blah

If you have swap, you should clear that, too.

Regards,
Florian Philipp

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to