sanitizing disks: wiping swap, non-allocated space, and file-tails

2004-07-15 Thread David Kreil
-ascii Date: Fri, 16 Jul 2004 05:22:53 +0100 From: David Kreil [EMAIL PROTECTED] Hi, (1) I was wondering whether anyone knew of packages/tools to aid in sanitizing a FreeBSD system, i.e., wiping + the swap slice + non-allocated space on volumes + file-tails (the part of the last allocated

Re: sanitizing disks: wiping swap, non-allocated space, and file-tails

2004-07-16 Thread David Kreil
Dear cpghost, Thanks for your fast and helpful comment. The Handbook describes a basic gdbe setup but mentions that getting other volumes (like /home) onto a gdbe partition was trickier. Can you tell me which volumes you have on gdbe and what was required to get this working? I wonder, in

Re: sanitizing disks: wiping swap, non-allocated space, and file-tails

2004-07-17 Thread David Kreil
Dear Jan, Thank you very much for your comments! I wonder, in particular, how system directories like /var would be kept on a gdbe partition. Much like any other, but the major issue is that, unlike /tmp/ and swap (which can be wiped clean when a machine boots with no ill effects),

How to recover/reinitialize a trashed /var partition?

2004-07-28 Thread David Kreil
Hello, I am writing in the hope that someone can give me a hint of how to either recover or recreate a virgin FreeBSD /var partition in an otherwise (apparently) functioning system. Probably in the process of a drive failure in our hardware raid our /var volume got corrupted (yeah, I know

Re: How to recover/reinitialize a trashed /var partition?

2004-07-28 Thread David Kreil
Dear Brooks, Thank you very much for your fast and helpful reply. # populate /var /usr/sbin/mtree -deU -f /etc/mtree/BSD.var.dist -p /var # add sendmail bits /usr/sbin/mtree -deU -f /etc/mtree/BSD.sendmail.dist -p / # create new syslog files /usr/sbin/newsyslog -CC # add a lastlog file

Re: How to recover/reinitialize a trashed /var partition?

2004-07-28 Thread David Kreil
Dear Brandon D Valentine, Thank you for your helpful comments. You may have to touch/chown/chmod a few files here and there to make sure the appropriate users have permissions to write to/from them. See /usr/src/etc/Makefile for some more information on that. Unfortunately I don't think

Re: gbde blackening feature - how are the keys destroyed?

2004-08-13 Thread David Kreil
in a different way. I'd be grateful for learning how the blackening works (and why!). With many thanks for your help in advance, David Kreil. Dr David Philip Kreil (`-''-/).___..--''`-._ Research Fellow

Re: gbde blackening feature - how can on disk keys be destroyed thoroughly?

2004-09-03 Thread David Kreil
the blackening works (and why!). With many thanks for your help in advance, David Kreil. Dr David Philip Kreil (`-''-/).___..--''`-._ Research Fellow`6_ 6

Re: gbde blackening feature - how can on-disk keys be destroyed thoroughly?

2004-09-03 Thread David Kreil
Dear LenZ, Who are you worried about recovering the data, under what circumstances? The value of the blackening feature should be that you can give away the drive and your password, say, under pressure by the [court|mafia|whoever], without compromising any confidential information on the

Re: gbde blackening feature - how can on disk keys be destroyed thoroughly?

2004-09-04 Thread David Kreil
Dear Poul-Henning, Thank you very much for your comments! From what I can see so far, they are simply overwritten with zeros - is that right? If so, the blackening feature would be much weakend, as one can read up to 20 layers of data even under random data (and more under zeros). I

Re: gbde blackening feature - how can on disk keys be destroyed thoroughly?

2004-09-05 Thread David Kreil
Dear Poul-Henning, On a modern disk there is no sequence of writes that will guarantee you that your data is iretriveable lost. Even if you rewrite a thousand times, you cannot guard yourself against the sector being replaced by a bad block spare after the first write. Good point. In