Re: Runtime de/encryption

2009-01-18 Thread Marco
First, thanks Roland. On-disk encryption is not meant to secure access on a running machine. This is very true. And the reason for my thoughts on that topic. I don't think there is something like that can be easily done. You'd have to alter the semantics of systems calls like open(2) and

Re: Runtime de/encryption

2009-01-18 Thread Roland Smith
On Sun, Jan 18, 2009 at 10:57:38PM +0100, Marco wrote: First, thanks Roland. On-disk encryption is not meant to secure access on a running machine. This is very true. And the reason for my thoughts on that topic. I don't think there is something like that can be easily done. You'd have

Runtime de/encryption

2009-01-16 Thread Marco
Hello List, i'am using the geom framework for quite a time. I'am happy about gbde/geli implementations(beside the race condition in geli) however, i wonder since some time, as the data may get exposed on a running server(as the partitions decrypted) is there a way to do some kind of runtime

Re: Runtime de/encryption

2009-01-16 Thread Roland Smith
On Fri, Jan 16, 2009 at 02:59:34PM +0100, Marco wrote: Hello List, i'am using the geom framework for quite a time. I'am happy about gbde/geli implementations(beside the race condition in geli) however, i wonder since some time, as the data may get exposed on a running server(as the