Re: new home box for secure data storage

2008-10-31 Thread new_guy
unallocated space)... know what I mean? Man, this is getting a bit paranoid. -- View this message in context: http://www.nabble.com/new-home-box-for-secure-data-storage-tp20235167p20275760.html Sent from the openbsd user - misc mailing list archive at Nabble.com.

Re: new home box for secure data storage

2008-10-30 Thread Guido Tschakert
Douglas A. Tutty schrieb: On Wed, Oct 29, 2008 at 09:09:20PM -0500, patric conant wrote: I'm confused, the encrypted volume cannot be backed up without a key? Sure, I could backup the encrypted volume. However, I'd rather back the data up as an unencrypted directory along with everything

Re: new home box for secure data storage

2008-10-30 Thread Michiel van Baak
On 16:14, Wed 29 Oct 08, Douglas A. Tutty wrote: I think I want root to be able to mount/access the directories so that the data can be included in a backup set (which is then piped through openssl for encryption) on a file-by-file basis rather than just backing up a filesystem image and

Re: new home box for secure data storage

2008-10-30 Thread Felipe Alfaro Solana
On Wed, Oct 29, 2008 at 9:14 PM, Douglas A. Tutty [EMAIL PROTECTED] wrote: I'll be setting up a new box for the house and I want to use OpenBSD for it, both for its security and since it will be an older box it will run better than with Debian. Roles: main firewall for dialup internet

Re: new home box for secure data storage

2008-10-30 Thread Douglas A. Tutty
On Thu, Oct 30, 2008 at 11:53:16AM +0100, Felipe Alfaro Solana wrote: On Wed, Oct 29, 2008 at 9:14 PM, Douglas A. Tutty [EMAIL PROTECTED] wrote: I'm thinking I could go two routes: 1. encrypt all of /home with an encrypted virtualfs file. However, then the data is unencrypted

Re: new home box for secure data storage

2008-10-30 Thread Douglas A. Tutty
On Thu, Oct 30, 2008 at 08:38:16AM +0100, Guido Tschakert wrote: Douglas A. Tutty schrieb: On Wed, Oct 29, 2008 at 09:09:20PM -0500, patric conant wrote: I'm confused, the encrypted volume cannot be backed up without a key? Sure, I could backup the encrypted volume. However, I'd rather

Re: new home box for secure data storage

2008-10-30 Thread Douglas A. Tutty
On Thu, Oct 30, 2008 at 09:34:56AM +0100, Michiel van Baak wrote: On 16:14, Wed 29 Oct 08, Douglas A. Tutty wrote: I think I want root to be able to mount/access the directories so that the data can be included in a backup set (which is then piped through openssl for encryption) on a

Re: new home box for secure data storage

2008-10-30 Thread eric-list-openbsd-misc
On Thu, 2008-10-30 at 10:45:20 -0400, Douglas A. Tutty proclaimed... Yes. Then keep it off a computer. Otherwise look for solutions that have already been presented...because they work. - Eric

new home box for secure data storage

2008-10-29 Thread Douglas A. Tutty
I'll be setting up a new box for the house and I want to use OpenBSD for it, both for its security and since it will be an older box it will run better than with Debian. Roles: main firewall for dialup internet access. fetchmail and sendmail to ISP smarthost other simple stuff (have another box

Re: new home box for secure data storage

2008-10-29 Thread Almir Karic
On Wed, Oct 29, 2008 at 04:14:22PM -0400, Douglas A. Tutty wrote: I'll be setting up a new box for the house and I want to use OpenBSD for it, both for its security and since it will be an older box it will run better than with Debian. Roles: main firewall for dialup internet access.

Re: new home box for secure data storage

2008-10-29 Thread Ted Unangst
I think I want root to be able to mount/access the directories so that the data can be included in a backup set (which is then piped through openssl for encryption) on a file-by-file basis rather than just backing up a filesystem image and risking the whole thing if that image becomes

Re: new home box for secure data storage

2008-10-29 Thread STeve Andre'
On Wednesday 29 October 2008 16:41:36 Almir Karic wrote: On Wed, Oct 29, 2008 at 04:14:22PM -0400, Douglas A. Tutty wrote: I'll be setting up a new box for the house and I want to use OpenBSD for it, both for its security and since it will be an older box it will run better than with

Re: new home box for secure data storage

2008-10-29 Thread Douglas A. Tutty
On Wed, Oct 29, 2008 at 09:41:36PM +0100, Almir Karic wrote: On Wed, Oct 29, 2008 at 04:14:22PM -0400, Douglas A. Tutty wrote: I'll be setting up a new box for the house and I want to use OpenBSD for it, both for its security and since it will be an older box it will run better than with

Re: new home box for secure data storage

2008-10-29 Thread Douglas A. Tutty
On Wed, Oct 29, 2008 at 02:56:53PM -0700, Ted Unangst wrote: I think I want root to be able to mount/access the directories so that the data can be included in a backup set (which is then piped through openssl for encryption) on a file-by-file basis rather than just backing up a

Re: new home box for secure data storage

2008-10-29 Thread patric conant
I'm confused, the encrypted volume cannot be backed up without a key? On Wed, Oct 29, 2008 at 8:45 PM, Douglas A. Tutty [EMAIL PROTECTED] wrote: On Wed, Oct 29, 2008 at 02:56:53PM -0700, Ted Unangst wrote: I think I want root to be able to mount/access the directories so that the data can

Re: new home box for secure data storage

2008-10-29 Thread Douglas A. Tutty
On Wed, Oct 29, 2008 at 09:09:20PM -0500, patric conant wrote: I'm confused, the encrypted volume cannot be backed up without a key? Sure, I could backup the encrypted volume. However, I'd rather back the data up as an unencrypted directory along with everything else. I don't know what's