Peter Albrecht wrote:
> SUSE also provides filesystem encryption (LUKS is used in 10.3 - I don't
> remember what is used in older versions). I am using it since a couple of
> years on my laptop.
LUKS is also what Red Hat has supported, even if only a "Tech
Preview" shipment in some releases.
> I think it is useful to cover this, especially after all those security
> Sissues that happened in the past months (authorities and military in the
> US and Europe losing their laptops with secret data).
I've never heard of US classified data (e.g., Secret, etc...) ever
being stolen on a laptop, but more public servants and other
bafoons of the US Federal government who do not merely
not secure, but segment networks (e.g., SIPRNET, etc...) and data.
Although access controls seem to be getting much better.
I mean, you can't even peak at SS or Passport files without
the access being flagged. Despite all the negatives I really
dislike that has gone on in the last decade ('98 to today),
there have been some really good legislation to control
not only access, but require court orders to release data
from one database to another. You go back just 7-8 years
or so and that did not exist, while the data warehousing
did (largely under temporary executive orders made in
haste in '98 and at other times). Most of these controls
are very good now, and it's nice to see Federal Agencies
in the US actually start implementing controls like the military
always had. It's not perfect, and there are things I do not
like, but some things are actually better than the info that
used to fly around, almost in-the-open (and not organized).
Physical security is what the US military has always done
well, and you can be certain the portable devices have always
had encryption. It was the non-classified stuff outside
the military and more on the public servant side that was
always the problem.
-- Bryan
P.S. This is also an area where Red Hat has significant
presence in the last few years, including certificate-based
authentication and encryption. Remember, Red Hat sells
more than just "RHEL," and it's best to keep that in mind
when answering whether or not Red Hat ships/supports
something. :)
--
Bryan J Smith - mailto:[EMAIL PROTECTED]
http://thebs413.blogspot.com
Sent via BlackBerry from T-Mobile
_______________________________________________
lpi-examdev mailing list
lpi-examdev@lpi.org
http://list.lpi.org/cgi-bin/mailman/listinfo/lpi-examdev
