OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Muscle] linux bootprotection with smartcards? (offtopic)

From: Ph. Marek (philipp.marekbmlv.gv.at)
Date: Thu Jul 03 2003 - 03:37:41 CDT


> > That's why I suggested using linux - there everything is available, and
> > there'll even be new drivers as needed over time :-)
>
> Yes, in this respect your are right. Everything would be much easier with a
> normal linux kernel. But you would have to repartition your harddisk in
> order to install a bootprotection ( except you start a installation from
> scratch ). Maybe one could combine both methods: boot a minimal linux
> kernel with build in smartcard authentication from any filesystem with grub
> which again boots the final OS ?
That's of course possible. Or you may have the last cylinder free; there'll be
some place free.

In the worst case you could resize a partition - which should be fast and
painless if you need just one cylinder, which amounts to about 8MB on most
harddisks ...

If you don't have this space you'll have a problem in every case - where do
you put your pre-boot-executable for authentication? after the mbr and before
the first partition you likely have 62 sectors free - that is 32kB ... not
much space for gui, USB, serial, smart card and reader drivers ...

So yes, I believe using grub and an existing filesystem to boot from should be
enough.

Regards,

Phil

_______________________________________________
Muscle mailing list
Musclelists.musclecard.com
http://lists.musclecard.com/mailman/listinfo/muscle