OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [suse-security] Encryption of data and disks ..

From: Arjen de Korte (suse+securityde-korte.org)
Date: Tue Jun 21 2005 - 06:10:47 CDT


> Hello
>
> I have installed suse 9.2 and I want to protect my data.
>
> I want when the computer boots, It don't ask to enter any password.. But
> if
> anyone tryied to read the data that is in htdocs It should ask.
> Only the user wwwrun can read it without any problem. Is it possible. I
> don't want none to fool around with my apache server.
> If someone triesto take out the disk and tryies to mount it on another
> computer he can't.

You need an encrypted filesystem to do that. Google for 'encrypted
filesystem' and you'll find a plethora of guidance how to setup something
like that. It most likely *will* require a password (manual intervention)
at bootup to make this reasonably secure however.

> Is there any way that I can do it. Or placing a hardkey on the LPT Port.

Nice try, but if someone is able to remove the harddisk from your server,
don't you think they may also be able to grab that key from your system?
Or take steal the entire system? As long as you can't physically secure
access to your system, it will be *very* hard to accomplish what you want
without some sort of password.

> Thanks any idea would be apreciated.
>
>
>
> --
> Check the headers for your unsubscription address
> For additional commands, e-mail: suse-security-helpsuse.com
> Security-related bug reports go to securitysuse.de, not here
>
>

--
Eindhoven - The Netherlands
Key fingerprint - 66 4E 03 2C 9D B5 CB 9B 7A FE 7E C1 EE 88 BC 57

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here